Read the docs

I-O DATA DEVICE, INC.

Records34All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high22CVSS 7.0–8.9

Exploited now

I-O DATA DEVICE, INC. records in CISA KEV

No I-O DATA DEVICE, INC. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Np-bbrm 1 record LOW

Records

34 records

TI-2025-23129 CVE-2025-32002 · GHSA-8x6j-j8rc-9m7p

OS command injection in I-O DATA DEVICE, INC. HDL-TC1

Priority MEDIUM 51

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote Link3 function' is…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01577 Published 2025-05-15 No fix listed CWE-78
TI-2016-06558 CVE-2016-7806 · GHSA-qvf2-gvfg-5q7r

OS command injection in I-O DATA DEVICE, INC. WFS-SR01

Priority MEDIUM 49

I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03977 Published 2017-06-09 No fix listed CWE-78
TI-2017-01445 CVE-2017-2142 · GHSA-m72x-38gx-mvv8

Memory corruption in I-O DATA DEVICE, INC. WN-G300R3

Priority MEDIUM 48

Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03076 Published 2017-04-28 No fix listed CWE-119
TI-2025-35943 CVE-2025-58116 · GHSA-j2cx-6vg6-6fhw

OS command injection in I-O DATA DEVICE, INC. WN-7D36QR

Priority MEDIUM 41

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in WN-7D36QR and WN-7D36QR/UE.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.0112 Published 2025-09-17 No fix listed CWE-78
TI-2018-00618 CVE-2018-0663 · GHSA-m444-29mg-hm99

Hard-coded credentials in I-O DATA DEVICE, INC. Multiple I-O DATA network camera products

Priority MEDIUM 41

Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier) use hardcoded credentials which may allow an remo…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01624 Published 2018-09-07 No fix listed CWE-798
TI-2017-01418 CVE-2017-2113 · GHSA-3922-7hw8-xghx

Memory corruption in I-O DATA DEVICE, INC. TS-WPTCAM

Priority MEDIUM 41

Buffer overflow in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and ea…

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01592 Published 2017-04-28 No fix listed CWE-119
TI-2017-01417 CVE-2017-2112 · GHSA-hpw4-ph4f-2jvc

OS command injection in I-O DATA DEVICE, INC. TS-WPTCAM

Priority MEDIUM 41

TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and earlier, TS-PTCAM fir…

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01664 Published 2017-04-28 No fix listed CWE-78
TI-2017-01563 CVE-2017-2281 · GHSA-f825-9462-xpqm

OS command injection in I-O DATA DEVICE, INC. WN-AX1167GR

Priority MEDIUM 40

WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00837 Published 2017-08-02 No fix listed CWE-78
TI-2017-01562 CVE-2017-2280 · GHSA-669p-r7m5-537j

Hard-coded credentials in I-O DATA DEVICE, INC. WN-AX1167GR

Priority MEDIUM 40

WN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the device.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00843 Published 2017-08-02 No fix listed CWE-798
TI-2017-01513 CVE-2017-2223 · GHSA-f6cr-72hv-6m28

Cross-site request forgery in I-O DATA DEVICE, INC. TS-WPTCAM

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM2 firmware version 1.01 and earlier allows remote attackers t…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00913 Published 2017-07-07 No fix listed CWE-352
TI-2018-00616 CVE-2018-0661 · GHSA-7w6m-jfjg-vq8f

Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier…

Priority LOW 39

Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier) allow an attacker on the same network segment to…

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00641 Published 2018-09-07 No fix listed
TI-2016-06566 CVE-2016-7814 · GHSA-63x4-qqjh-3394

Information disclosure in I-O DATA DEVICE, INC. TS-WRLP

Priority LOW 38

I-O DATA DEVICE TS-WRLP firmware version 1.00.01 and earlier and TS-WRLA firmware version 1.00.01 and earlier allow remote attackers to obtain authentication credentials via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02663 Published 2017-06-09 No fix listed CWE-200
TI-2025-23796 CVE-2025-32738 · GHSA-hc36-4gf4-49qx

Missing authentication in I-O DATA DEVICE, INC. HDL-TC1

Priority LOW 37

Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00421 Published 2025-05-15 No fix listed CWE-306
TI-2016-06572 CVE-2016-7820 · GHSA-3v99-rpgw-rrch

Memory corruption in I-O DATA DEVICE, INC. TS-WRLP

Priority LOW 37

Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to cause a denial-of-service (DoS) or execute…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.03252 Published 2017-06-09 No fix listed CWE-119
TI-2016-06559 CVE-2016-7807 · GHSA-46jq-fg29-4xmw

Improper access control in I-O DATA DEVICE, INC. WFS-SR01

Priority LOW 37

I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to bypass access restriction to access data on storage devices inserted into the product via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02016 Published 2017-06-09 No fix listed CWE-284
TI-2025-19727 CVE-2025-26856 · GHSA-p9q9-h36m-37f9

OS command injection in I-O DATA DEVICE, INC. UD-LT2

Priority LOW 36

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01122 Published 2025-02-20 No fix listed CWE-78
TI-2025-14690 CVE-2025-20617 · GHSA-gvc8-62fw-4c9c

OS command injection in I-O DATA DEVICE, INC. UD-LT2

Priority LOW 36

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01174 Published 2025-01-22 No fix listed CWE-78
TI-2017-01565 CVE-2017-2283 · GHSA-cqwm-2fcx-2wc7

Hard-coded credentials in I-O DATA DEVICE, INC. WN-G300R3

Priority LOW 36

WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the device.

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00629 Published 2017-08-02 No fix listed CWE-798
TI-2016-06571 CVE-2016-7819 · GHSA-g62f-xp5c-89jw

OS command injection in I-O DATA DEVICE, INC. TS-WRLP

Priority LOW 36

I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02199 Published 2017-06-09 No fix listed CWE-78
TI-2024-31505 CVE-2024-47133 · GHSA-2xq2-5cvx-fvrj

OS command injection in I-O DATA DEVICE, INC. UD-LT1

Priority LOW 35

UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier allow a remote authenticated attacker with an administrative account to execute arbitrary OS commands.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.00898 Published 2024-12-05 No fix listed CWE-78
TI-2017-07973 CVE-2017-10875 · GHSA-32fg-cv9g-c28f

Memory corruption in I-O DATA DEVICE, INC. LAN DISK Connect

Priority LOW 35

I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01234 Published 2017-11-13 No fix listed CWE-119
Load more
Open these records in search →