Iodata Etx-R Firmware vulnerabilities

2 CVEs affecting Iodata Etx-R Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-4821, published 2016-06-19.

More from Iodata.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-4821, published 2016-06-19. Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days. I-O DATA DEVICE ETX-R devices allow remote attackers to cause a denial of service (web-server crash) via unspecified vectors.
• CVE-2016-4820, published 2016-06-19. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of arbitrary users.