A vulnerability has been reported in I-O DATA HDL-F series, which can be exploited by malicious people to conduct cross-site request forgery attacks.

The web interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the request. This can be exploited to e.g. delete data or change certain settings when a logged-in user visits a malicious web site.

Solution
Apply the updated firmware.
Further details available to Secunia VIM customers

Provided and/or discovered by
JVN credits Takayuki Ogiso

Changelog
Further details available to Secunia VIM customers

Original Advisory
JVN:
http://jvn.jp/jp/JVN70599814/index.html

I-O DATA:
http://www.iodata.jp/news/2008/important/hdl-f.htm

Deep Links
Links available to Secunia VIM customers