CVE-2013-4712

I-O DATA DEVICE HDL-A and HDL2-A devices with firmware 1.07 and earlier do not properly manage sessions, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.

Score

CVSS 2.0 6.8 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2013-10-19

Last modified

2024-09-16

Weaknesses

CWE-399

Affected products

• Hdl-a/e (Iodata)
• Hdl-a Firmware (Iodata)
• Hdl-ah (Iodata)
• Hdl-as (Iodata)
• Hdl2-a/e (Iodata)
• Hdl2-a Firmware (Iodata)
• Hdl2-ah (Iodata)

References

• http://jvn.jp/en/jp/JVN52509236/225184/index.html
• http://jvn.jp/en/jp/JVN52509236/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000095
• http://rm2.iobb.net