CVE-2017-2223: Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-...

Security readout for executives and security teams

This CVE affects several I-O DATA camera and related network device firmware versions. It is a cross-site request forgery issue that could let an attacker misuse an authenticated administrator’s browser session. Business risk is highest where administrators manage these devices from normal browsing environments or exposed management networks. Exposure is limited to organizations running the named I-O DATA products at the affected firmware versions. Risk depends on whether administrative users access the device management interface and whether attackers can induce browser requests during authenticated sessions. Treat this as a targeted operational hygiene item, not an emergency based on the supplied evidence. Prioritize if these cameras support sensitive facilities, are remotely administered, or cannot be isolated from normal user browsing activity. Mitigation focus: Inventory the named I-O DATA models and firmware versions.; Check I-O DATA and JVN guidance for fixed firmware or vendor mitigations.; Restrict access to device administration interfaces to trusted management networks..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.