CVE:CVE-2017-2223
CNNVD:CNNVD-201706-885
I-O DATA TS-WPTCAM等都是日本I-O DATA DEVICE公司的网络摄像机。
多款I-O DATA产品中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞执行未授权的操作。以下产品和版本受到影响：使用1.19及之前版本固件的TS-WPTCAM；使用1.19及之前版本固件的TS-PTCAM；使用1.19及之前版本固件的TS-PTCAM/POE；使用1.19及之前版本固件的TS-WLC2；使用1.19及之前版本固件的TS-WLCE；使用1.19及之前版本固件的TS-WRLC；使用1.01及之前版本固件的TS-WPTCAM2。
solution:Upgrade iodata ts-wptcam_camera_firmware to a higher version than 1.19,and avoid the version (,1.19]; Upgrade iodata ts-ptcam_camera_firmware to a higher version than 1.19,and avoid the version (,1.19]; Upgrade iodata ts-ptcam/poe_camera_firmware to a higher version than 1.19,and avoid the version (,1.19]; Upgrade iodata ts-wlc2_camera_firmware to a higher version than 1.19,and avoid the version (,1.19]; Upgrade iodata ts-wlce_camera_firmware to a higher version than 1.19,and avoid the version (,1.19]; Upgrade iodata ts-wrlc_camera_firmware to a higher version than 1.19,and avoid the version (,1.19]; Upgrade iodata ts-wptcam2_firmware to a higher version than 1.01,and avoid the version (,1.01]