CVE-2008-5382: Cross-site request forgery (CSRF) vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F3...

Security readout for executives and security teams

This issue affects older I-O DATA HDL-F series NAS firmware before 1.02. A logged-in administrator or user could be tricked through CSRF into changing settings or deleting files. The public record does not provide technical vectors, CVSS scoring, or confirmed exploitation. Exposure is most likely limited to legacy I-O DATA HDL-F160, HDL-F250, HDL-F300, and HDL-F320 devices running firmware earlier than 1.02, especially where browser-accessible administration is used by authenticated users. Treat this as a legacy storage appliance risk. Prioritize inventory confirmation and firmware review if these NAS models may still store business data. Urgency increases if administrative interfaces are reachable from broad internal networks. Mitigation focus: Identify any I-O DATA HDL-F series devices in asset inventory.; Check whether firmware is earlier than version 1.02.; Review the I-O DATA advisory for vendor-supported update guidance..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.