CVE-2013-4713

CVE-2013-4713 affects I-O DATA DEVICE RockDisk, where firmware prior to 1.05e1-2.0.5 is vulnerable to Cross-site scripting (XSS) by remote authenticated users via unspecified vectors. The exact exploitation details aren’t provided in the documents, but multiple sources report an incomplete fix le...

CVE-2014-3887

CVE-2014-3887 affects I-O DATA DEVICE RockDisk NAS devices. A cross-site scripting (XSS) vulnerability exists in firmware versions prior to 1.05e1-2.0.5 , allowing remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The issue traces to an incomplete fix for ...