CVE

Id
91664  
CVE No.
CVE-2016-4845  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0, HVL-AT4.0, HVL-AT2.0A, HVL-AT3.0A, and HVL-AT4.0A devices with firmware before 2.04 allows remote attackers to hijack the authentication of arbitrary users for requests that delete content.  
Phase
Assigned (20160517)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
786877 91664 CVE-2016-4845 CONFIRM:http://www.iodata.jp/support/information/2016/hvl-a_csrf/  View
786878 91664 CVE-2016-4845 JVN:JVN#35062083  View
786879 91664 CVE-2016-4845 URL:http://jvn.jp/en/jp/JVN35062083/index.html  View
786880 91664 CVE-2016-4845 JVNDB:JVNDB-2016-000134  View
786881 91664 CVE-2016-4845 URL:http://jvndb.jvn.jp/jvndb/JVNDB-2016-000134  View
786882 91664 CVE-2016-4845 BID:92352  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3835 JVNDB-2016-004608 Google Chrome の PDFium で使用される OpenJPEG の tcd.c の opj_tcd_init_tile 関数における整数オーバーフローの脆弱性 Google Chrome の PDFium で使用される OpenJPEG の tcd.c の opj_tcd_init_tile 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2016-5158 91664 6.8 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004608.html  View