First published: Sat Oct 19 2013(Updated: )
I-O DATA DEVICE HDL-A and HDL2-A devices with firmware 1.07 and earlier do not properly manage sessions, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
Credit: vultures@jpcert.or.jp
Affected Software | Affected Version | How to fix |
---|---|---|
Iodata Hdl2-a Firmware | ||
Iodata Hdl2-ah Firmware | ||
Iodata Hdl2-a | =1.07 | |
Iodata Hdl-a/e | ||
Iodata Hdl-ah Firmware | ||
Iodata Hdl-as | ||
Iodata Hdl-a/e | <=1.07 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-4712 has a medium severity rating due to its potential to expose sensitive information.
To fix CVE-2013-4712, update the firmware of the affected I-O DATA DEVICE HDL-A and HDL2-A devices to a version later than 1.07.
CVE-2013-4712 affects I-O DATA DEVICE HDL-A and HDL2-A devices with firmware version 1.07 and earlier.
CVE-2013-4712 represents a session management vulnerability that can lead to unauthorized access and data modification.
Yes, CVE-2013-4712 can be exploited remotely, allowing attackers to obtain sensitive information or modify data.