medium6.8
CVE-2013-4712
I-O DATA DEVICE HDL-A and HDL2-A devices with firmware 1.07 and earlier do not properly manage sessions, which allows remote attackers to obtain sensitive info…
Impact
I-O DATA DEVICE HDL-A and HDL2-A devices with firmware 1.07 and earlier do not properly manage sessions, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iodata | Hdl2-A\/E | All versions |
| Iodata | Hdl2-Ah | All versions |
| Iodata | Hdl2-A Firmware | Version 1.07 |
| Iodata | Hdl-A\/E | All versions |
| Iodata | Hdl-Ah | All versions |
| Iodata | Hdl-As | All versions |
| Iodata | Hdl-A Firmware | through 1.07 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN52509236/225184/index.html
- http://jvn.jp/en/jp/JVN52509236/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000095
- http://rm2.iobb.net
- http://jvn.jp/en/jp/JVN52509236/225184/index.html
- http://jvn.jp/en/jp/JVN52509236/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000095
- http://rm2.iobb.net