CVE-2016-4845

Cross-site request forgery CSRF vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0, HVL-AT4.0, HVL-AT2.0A, HVL-AT3.0A, and HVL-AT4.0A devices with firmware before 2.04 allows remote attackers to hijack the authentication of arbitrary users for requests...

CVE-2016-4845

The CVE-2016-4845 issue affects I-O DATA DEVICE HVL-series (HVL-A2.0/A3.0/A4.0, HVL-AT1.0S/AT2.0/AT3.0/AT4.0, and AT2.0A/AT3.0A/AT4.0A) firmware before 2.04. It is a Cross‑Site Request Forgery (CSRF) vulnerability in the web management/UI that allows remote attackers to hijack the authentication ...