CVE-2014-3887: XSS
Cross-site scripting (XSS) vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-4713.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3887?
CVE-2014-3887 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2014-3887?
To fix CVE-2014-3887, update the I-O DATA DEVICE RockDisk firmware to version 1.05e1-2.0.5 or later.
Who is affected by CVE-2014-3887?
Users of the I-O DATA DEVICE RockDisk with firmware versions prior to 1.05e1-2.0.5 are affected by CVE-2014-3887.
What types of attacks can CVE-2014-3887 lead to?
CVE-2014-3887 can lead to cross-site scripting (XSS) attacks, allowing attackers to inject arbitrary web scripts or HTML.
What is the cause of CVE-2014-3887?
CVE-2014-3887 exists due to an incomplete fix for the previously identified CVE-2013-4713 vulnerability.