Unrated severityNVD Advisory· Published Dec 9, 2008· Updated Jun 16, 2026

CVE-2008-5382

Description

Cross-site request forgery (CSRF) vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to (1) change a configuration or (2) delete files as an authenticated user via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

I-O DATA/Hlf F160
cpe:2.3:h:i-o_data:hlf-f160:*:*:*:*:*:*:*:*
I-O DATA/Hlf F250
cpe:2.3:h:i-o_data:hlf-f250:*:*:*:*:*:*:*:*
I-O DATA/Hlf F300
cpe:2.3:h:i-o_data:hlf-f300:*:*:*:*:*:*:*:*
I-O DATA/Hlf F320
cpe:2.3:h:i-o_data:hlf-f320:*:*:*:*:*:*:*:*
I-O DATA/HDL-F250llm-create
Range: <1.02
I-O DATA/HDL-F300llm-create
Range: <1.02
I-O DATA/HDL-F160llm-fuzzy
Range: <1.02

Patches

Vulnerability mechanics

References

secunia.com/advisories/32836nvdVendor Advisory
jvn.jp/en/jp/JVN70599814/index.htmlnvd
osvdb.org/50183nvd
www.iodata.jp/news/2008/important/hdl-f.htmnvd
exchange.xforce.ibmcloud.com/vulnerabilities/46880nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000