Unrated severityNVD Advisory· Published Dec 9, 2008· Updated Apr 23, 2026

CVE-2008-5382

Description

Cross-site request forgery (CSRF) vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to (1) change a configuration or (2) delete files as an authenticated user via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

I O Data/Hlf F160
cpe:2.3:h:i-o_data:hlf-f160:*:*:*:*:*:*:*:*
I O Data/Hlf F250
cpe:2.3:h:i-o_data:hlf-f250:*:*:*:*:*:*:*:*
I O Data/Hlf F300
cpe:2.3:h:i-o_data:hlf-f300:*:*:*:*:*:*:*:*
I O Data/Hlf F320
cpe:2.3:h:i-o_data:hlf-f320:*:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/32836nvdVendor Advisory
jvn.jp/en/jp/JVN70599814/index.htmlnvd
osvdb.org/50183nvd
www.iodata.jp/news/2008/important/hdl-f.htmnvd
exchange.xforce.ibmcloud.com/vulnerabilities/46880nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000