Iodata

35 CVEs across 164 Iodata products. Browse Iodata vulnerabilities, severities, and proof-of-concept exploits.

Iodata products with known CVEs

ProductCVEs
Ts-Wrla6
Ts-Wrla Firmware6
Ts-Wrlp6
Ts-Wrlp Firmware6
Wn-G300r35
Wn-G300r3 Firmware5
Ts-Wptcam24
Ts-Wptcam2 Firmware4
Wn-Ax1167gr4
Wn-Ax1167gr Firmware4
Ts-Ptcam3
Ts-Ptcam Firmware3
Ts-Ptcam\/poe3
Ts-Ptcam\/poe Firmware3
Ts-Wlc23
Ts-Wlc2 Firmware3
Ts-Wlce3
Ts-Wlce Firmware3
Ts-Wptcam3
Ts-Wptcam Firmware3
Ts-Wrlc3
Ts-Wrlc Firmware3
Ts-Wrlp\/e3
Ts-Wrlp\/e Firmware3
Etx-R2
Etx-R Firmware2
Hdl2-A Firmware2
Hdl2-Ah2
Hdl-A Firmware2
Hdl-Ah2
Hvl-A2
Hvl-At2
Hvl-Ata2
Rockdisk2
Rockdisk Firmware2
Ts-Ptcam Camera2
Ts-Ptcam Camera Firmware2
Ts-Ptcam\/poe Camera2
Ts-Ptcam\/poe Camera Firmware2
Ts-Wlc2 Camera2
Ts-Wlc2 Camera Firmware2
Ts-Wptcam Camera2
Ts-Wptcam Camera Firmware2
Wfs-Sr012
Wfs-Sr01 Firmware2
Wfs-Sr03k2
Wfs-Sr03k Firmware2
Wfs-Sr03w2
Wfs-Sr03w Firmware2
Wn-Ac1167r2
Iodata CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-29805Critical9.82023-04-14WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the pro_stor_canceltrans_handler_part_19 function.
CVE-2023-29804High8.82023-04-14WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the sys_smb_pwdmod function.
CVE-2019-19823High7.52020-01-27A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and…
CVE-2019-19822High7.52020-01-27A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, includ…
CVE-2018-0663High8.82018-09-07Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 a…
CVE-2018-0662Medium6.82018-09-07Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 a…
CVE-2018-0661High8.82018-09-07Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 a…
CVE-2018-0512Medium6.82018-02-08Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC. allow authenticated attackers to execute arbitrary OS commands via unspe…
CVE-2017-10875High7.52017-11-13I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vectors.
CVE-2017-2283High8.02017-08-02WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the…
CVE-2017-2282Medium6.82017-08-02Buffer overflow in WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary commands via unspecified vectors.
CVE-2017-2281High8.82017-08-02WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.
CVE-2017-2280High8.82017-08-02WN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on th…
CVE-2017-2223High8.82017-07-07Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM…
CVE-2016-7820High7.22017-06-09Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with admini…
CVE-2016-7819High7.22017-06-09I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to e…
CVE-2016-7814High7.52017-06-09I-O DATA DEVICE TS-WRLP firmware version 1.00.01 and earlier and TS-WRLA firmware version 1.00.01 and earlier allow remote attackers to obtain authentication c…
CVE-2016-7807High7.52017-06-09I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to bypass access restriction to access data on storage devices inserted into…
CVE-2016-7806Critical9.82017-06-09I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors.
CVE-2017-2148Medium5.42017-04-28Cross-site scripting vulnerability in WN-AC1167GR firmware version 1.04 and earlier allows remote authenticated attackers to inject arbitrary web script or HTM…
CVE-2017-2142Critical9.82017-04-28Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
CVE-2017-2141High7.22017-04-28WN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute arbitrary OS commands via unspecified vectors.
CVE-2017-2113High8.82017-04-28Buffer overflow in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware v…
CVE-2017-2112High8.82017-04-28TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and ear…
CVE-2017-2111Medium6.12017-04-28HTTP header injection vulnerability in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier…
CVE-2014-3887Medium5.42017-04-13Cross-site scripting (XSS) vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary we…
CVE-2016-4845High8.82016-09-24Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0, HVL-AT4.0, HVL-AT2.0A, HVL-A…
CVE-2016-4821Medium5.32016-06-19I-O DATA DEVICE ETX-R devices allow remote attackers to cause a denial of service (web-server crash) via unspecified vectors.
CVE-2016-4820High8.82016-06-19Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of arbitrary users.
CVE-2016-1207Medium5.42016-05-14Cross-site scripting (XSS) vulnerability on I-O DATA DEVICE WN-G300R devices with firmware 1.12 and earlier, WN-G300R2 devices with firmware 1.12 and earlier…
CVE-2016-1206Medium4.32016-05-14The WPS implementation on I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices does not limit PIN guesses, which allows remote attacker…
CVE-2015-29842015-08-22I-O DATA DEVICE WN-G54/R2 routers with firmware before 1.03 and NP-BBRS routers allow remote attackers to cause a denial of service (SSDP reflection) via UPnP…
CVE-2014-38952014-07-29The I-O DATA TS-WLCAM camera with firmware 1.06 and earlier, TS-WLCAM/V camera with firmware 1.06 and earlier, TS-WPTCAM camera with firmware 1.08 and earlier…
CVE-2013-47132013-11-01Cross-site scripting (XSS) vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary we…
CVE-2013-47122013-10-19I-O DATA DEVICE HDL-A and HDL2-A devices with firmware 1.07 and earlier do not properly manage sessions, which allows remote attackers to obtain sensitive info…