I-O Data Device, Inc.

33 CVEs across 31 I-O Data Device, Inc. products. Browse I-O Data Device, Inc. vulnerabilities, severities, and proof-of-concept exploits.

I-O Data Device, Inc. products with known CVEs

ProductCVEs
Ts-Ptcam/poe4
Ts-Wlc24
Ts-Wlce4
Ts-Wptcam4
Ts-Wptcam24
Ts-Wrlc4
Ud-Lt24
Multiple I-O Data Network Camera Products3
Ts-Wrla3
Ts-Wrlp3
Ud-Lt13
Ud-Lt1/ex3
Wn-Ax1167gr3
Wn-G300r33
Hdl-T1nv2
Hdl-T1wh2
Hdl-T2nv2
Hdl-T2wh2
Hdl-T3nv2
Hdl-T3wh2
Hdl-Tc12
Hdl-Tc5002
Wfs-Sr012
Wn-7d36qr2
Wn-7d36qr/ue2
Clone For Windows1
Ip Address Setting Tool "Magicalfinder"1
Lan Disk Connect1
Narsus App1
Ts-Ptcam1
Wn-Ac1167gr1
I-O Data Device, Inc. CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-61865Medium6.72025-10-23Multiple NAS management applications provided by I-O DATA DEVICE, INC. register Windows services with unquoted file paths. A user with the write permission on…
CVE-2025-58116High7.22025-09-17Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is…
CVE-2025-55075Medium4.92025-09-17Hidden functionality issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, SSH may be enabled by a remote authenticated attacker.
CVE-2025-32738Medium5.32025-05-15Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier. If exploited, a…
CVE-2025-32002Critical9.82025-05-15Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' f…
CVE-2025-26856High7.22025-02-20Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. If an a…
CVE-2025-23237Medium6.62025-01-22Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. If a us…
CVE-2025-22450High7.52025-01-22Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. A remote attacker may disable the LAN-side firewall function of…
CVE-2025-20617High7.22025-01-22Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. If an a…
CVE-2024-52564High7.52024-12-05Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier. A remote…
CVE-2024-47133High7.22024-12-05UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier allow a remote authenticated attacker with an administrative account to exec…
CVE-2024-45841Medium6.52024-12-05Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier. If an…
CVE-2018-0663High8.82018-09-07Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 a…
CVE-2018-0662Medium6.82018-09-07Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 a…
CVE-2018-0661High8.82018-09-07Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 a…
CVE-2018-0512Medium6.82018-02-08Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC. allow authenticated attackers to execute arbitrary OS commands via unspe…
CVE-2017-10875High7.52017-11-13I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vectors.
CVE-2017-2283High8.02017-08-02WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the…
CVE-2017-2282Medium6.82017-08-02Buffer overflow in WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary commands via unspecified vectors.
CVE-2017-2281High8.82017-08-02WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.
CVE-2017-2280High8.82017-08-02WN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on th…
CVE-2017-2223High8.82017-07-07Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM…
CVE-2016-7820High7.22017-06-09Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with admini…
CVE-2016-7819High7.22017-06-09I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to e…
CVE-2016-7814High7.52017-06-09I-O DATA DEVICE TS-WRLP firmware version 1.00.01 and earlier and TS-WRLA firmware version 1.00.01 and earlier allow remote attackers to obtain authentication c…
CVE-2016-7807High7.52017-06-09I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to bypass access restriction to access data on storage devices inserted into…
CVE-2016-7806Critical9.82017-06-09I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors.
CVE-2017-2148Medium5.42017-04-28Cross-site scripting vulnerability in WN-AC1167GR firmware version 1.04 and earlier allows remote authenticated attackers to inject arbitrary web script or HTM…
CVE-2017-2142Critical9.82017-04-28Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
CVE-2017-2141High7.22017-04-28WN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute arbitrary OS commands via unspecified vectors.
CVE-2017-2113High8.82017-04-28Buffer overflow in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware v…
CVE-2017-2112High8.82017-04-28TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and ear…
CVE-2017-2111Medium6.12017-04-28HTTP header injection vulnerability in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier…