JVN#70599814 I-O DATA DEVICE HDL-F series cross-site request forgery vulnerability

The HDL-F series products provided by I-O DATA DEVICE, INC. are LAN connectable hard disk drives. Configuration of these devices are done through a web-based interface. This web interface is vulnerable to cross-site request forgery.

Impact

If a user views a malicious web page while logged into the web-based interface, an attacker could modify configurations or delete data on the hard disk drive.

Solution

Update the Software
Apply the firmware updates provided by the vendor.

Products Affected

• HDL-F series products