EUVD-2013-4565

Malware in sbrugna...

I-O DATA DEVICE RockDisk Cross-Site Scripting Vulnerability

The I-O DATA DEVICE RockDisk is a networked storage NAS device from Japan's I-O DATA DEVICE. The device provides data storage functions for centralized management of stored data. A cross-site scripting vulnerability exists in the I-O DATA DEVICE RockDisk using firmware versions prior to...

Cross site scripting

Cross-site scripting XSS vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-4713...

CVE-2014-3887

Cross-site scripting XSS vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-4713...

CVE-2014-3887

CVE-2014-3887 affects I-O DATA DEVICE RockDisk NAS devices. A cross-site scripting (XSS) vulnerability exists in firmware versions prior to 1.05e1-2.0.5 , allowing remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The issue traces to an incomplete fix for ...

RockDisk vulnerable to cross-site scripting

Overview RockDisk provided by I-O DATA DEVICE, INC. are LAN connectable hard disk drives. RockDisk contains a cross-site scripting vulnerability. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-4713. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC...

CVE-2013-4713

Cross-site scripting XSS vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4713

Cross-site scripting XSS vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4713

CVE-2013-4713 affects I-O DATA DEVICE RockDisk, where firmware prior to 1.05e1-2.0.5 is vulnerable to Cross-site scripting (XSS) by remote authenticated users via unspecified vectors. The exact exploitation details aren’t provided in the documents, but multiple sources report an incomplete fix le...

RockDisk vulnerable to cross-site scripting

Overview RockDisk provided by I-O DATA DEVICE, INC. are LAN connectable hard disk drives. RockDisk contains a cross-site scripting vulnerability. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#74608669: RockDisk vulnerable to cross-site scripting

RockDisk provided by I-O DATA DEVICE, INC. are LAN connectable hard disk drives. RockDisk contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Firmware Apply the firmware update provided by the developer. Products...