JVNDB-2015-000172

Multiple routers contain issue in preventing clickjacking attacks

Multiple router products contain an issue in the protection against clickjacking attacks.

Noriaki Iwasaki of Cyber Defense Institute, Inc. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Multiple products are affected.

For more information on vulnerable products, please refer to the "Vendor Status" section.

(Multiple Venders)

• (Multiple Products)

If a user views a malicious page while logged in, unintended operations may be conducted.

[Apply a solution]
Solutions vary depending on the product.
Apply the appropriate solution according to the information provided by the developer.

Allied Telesis

• JVN : Information from Allied Telesis (in Japanese)

PLANEX COMMUNICATIONS INC.

• PLANEX : PLANEX COMMUNICATIONS INC. website (in Japanese)

Yamaha Corporation

• FAQ for YAMAHA RT Series / Security : Yamaha Corporation website (in Japanese)

I-O DATA DEVICE, INC.

• Security Infomation : I-O DATA DEVICE, INC. website (in Japanese)

THE FURUKAWA ELECTRIC CO., LTD.

• FITELnet : vulnera_20151127 (in Japanese)

NEC Corporation

• NEC Security Information : NV15-019 (in Japanese)

1. No Mapping(CWE-Other) [IPA Evaluation]

1. JVN : JVN#48135658

• [2015/10/30]
    Web page was published
  [2015/11/04]
    Vendor Information : Content was added
  [2015/11/12]
    Vendor Information : Content was added
  [2015/12/25]
    Vendor Information : Content was added
  [2016/02/12]
    Vendor Information : Content was added