Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0, HVL-AT4.0, HVL-AT2.0A, HVL-AT3.0A, and HVL-AT4.0A devices with firmware before 2.04 allows remote attackers to hijack the authentication of arbitrary users for requests...

CVE-2016-4845

Cross-site request forgery CSRF vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0, HVL-AT4.0, HVL-AT2.0A, HVL-AT3.0A, and HVL-AT4.0A devices with firmware before 2.04 allows remote attackers to hijack the authentication of arbitrary users for requests...

CVE-2016-4845

The CVE-2016-4845 issue affects I-O DATA DEVICE HVL-series (HVL-A2.0/A3.0/A4.0, HVL-AT1.0S/AT2.0/AT3.0/AT4.0, and AT2.0A/AT3.0A/AT4.0A) firmware before 2.04. It is a Cross‑Site Request Forgery (CSRF) vulnerability in the web management/UI that allows remote attackers to hijack the authentication ...

PT-2016-6176

Name of the Vulnerable Software and Affected Versions I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0, HVL-AT4.0, HVL-AT2.0A, HVL-AT3.0A, and HVL-AT4.0A devices with firmware prior to 2.04 Description A cross-site request forgery CSRF issue allows remote attackers t...

CVE-2016-4845: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0, HVL-AT4.0, HVL-AT2.0A, HVL-AT3.0A, and HVL-AT4.0A devices with firmware before 2.04 allows remote attackers to hijack the authentication of arbitrary users for requests...

Multiple I-O DATA DEVICE Products Cross-Site Request Forgery Vulnerability

The I-O DATA DEVICE HVL-A is a high-definition recording hard disk from Japan's I-O DATA DEVICE. A cross-site request forgery vulnerability exists in a number of I-O DATA DEVICE products, which allows remote attackers to construct malicious URIs, trick users into parsing them, and perform malicio...

JVN#35062083: Multiple I-O DATA Recording Hard disk products vulnerable to cross-site request forgery

Multiple Recording Hard disk products provided by I-O DATA DEVICE, INC. contain a cross-site request forgery vulnerability due to an issue in the web management screen. Impact If a user views a malicious page, an arbitrary content may be deleted. Solution Update the Firmware Apply the appropriate...

CVE-2016-4821

I-O DATA DEVICE ETX-R devices allow remote attackers to cause a denial of service web-server crash via unspecified vectors...

CVE-2016-4820

Cross-site request forgery CSRF vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-4820

Cross-site request forgery CSRF vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-4820

CVE-2016-4820 is a cross-site request forgery (CSRF) vulnerability in I-O DATA DEVICE ETX-R routers (CWE-352). The ETX-R web management interface can be abused by a logged-in user viewing a malicious page, allowing an attacker to perform unintended actions in the user’s authenticated session. Roo...

CVE-2016-4821

CVE-2016-4821 affects I-O DATA DEVICE ETX-R wired routers. The DoS vulnerability allows a remote unauthenticated attacker to cause the web server to terminate abnormally, via unspecified vectors. Public sources (JVN/JVNDB) describe the impact as a remote DoS on the device’s web server and note wo...

CVE-2016-4821

I-O DATA DEVICE ETX-R devices allow remote attackers to cause a denial of service web-server crash via unspecified vectors...

CVE-2016-4821: Undefined Security Weakness

I-O DATA DEVICE ETX-R devices allow remote attackers to cause a denial of service web-server crash via unspecified vectors...

PT-2016-6164

Name of the Vulnerable Software and Affected Versions I-O DATA DEVICE ETX-R devices affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a web-server crash. The specific vectors used to exploit this issue are not specified...

I-O DATA DEVICE ETX-R Denial of Service Vulnerability

The I-O DATA DEVICE ETX-R is a router product from I-O DATA DEVICE Japan. A denial of service vulnerability exists in the I-O DATA DEVICE ETX-R, which allows remote attackers to exploit the vulnerability by submitting a special request for a denial of service attack...

PT-2016-6163

Name of the Vulnerable Software and Affected Versions I-O DATA DEVICE ETX-R devices affected versions not specified Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. This means an attacker can perform actions on behalf of ...

CVE-2016-4820: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of arbitrary users...

JVN#61317238: ETX-R vulnerable to cross-site request forgery

ETX-R provided by I-O DATA DEVICE, INC. is a wired LAN router. ETX-R contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Apply a Workaround The following workarounds may mitigate the...