Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

34 records

Vendor: I-O DATA DEVICE, INC. Clear all filters
TI-2025-35943 CVE-2025-58116 · GHSA-j2cx-6vg6-6fhw

OS command injection in I-O DATA DEVICE, INC. WN-7D36QR

Priority MEDIUM 41

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in WN-7D36QR and WN-7D36QR/UE.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.0112 Published 2025-09-17 No fix listed CWE-78
TI-2025-23796 CVE-2025-32738 · GHSA-hc36-4gf4-49qx

Missing authentication in I-O DATA DEVICE, INC. HDL-TC1

Priority LOW 37

Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00421 Published 2025-05-15 No fix listed CWE-306
TI-2025-23129 CVE-2025-32002 · GHSA-8x6j-j8rc-9m7p

OS command injection in I-O DATA DEVICE, INC. HDL-TC1

Priority MEDIUM 51

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote Link3 function' is…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01577 Published 2025-05-15 No fix listed CWE-78
TI-2025-19727 CVE-2025-26856 · GHSA-p9q9-h36m-37f9

OS command injection in I-O DATA DEVICE, INC. UD-LT2

Priority LOW 36

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01122 Published 2025-02-20 No fix listed CWE-78
TI-2025-17014 CVE-2025-23237 · GHSA-p7vc-qhf7-x87j

OS command injection in I-O DATA DEVICE, INC. UD-LT2

Priority LOW 33

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier.

CVSS 3.0MEDIUM 6.6 Network High privileges No interaction EPSS 0.00926 Published 2025-01-22 No fix listed CWE-78
TI-2025-14690 CVE-2025-20617 · GHSA-gvc8-62fw-4c9c

OS command injection in I-O DATA DEVICE, INC. UD-LT2

Priority LOW 36

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01174 Published 2025-01-22 No fix listed CWE-78
TI-2024-31505 CVE-2024-47133 · GHSA-2xq2-5cvx-fvrj

OS command injection in I-O DATA DEVICE, INC. UD-LT1

Priority LOW 35

UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier allow a remote authenticated attacker with an administrative account to execute arbitrary OS commands.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.00898 Published 2024-12-05 No fix listed CWE-78
TI-2024-30798 CVE-2024-45841 · GHSA-wfqf-8h9w-jx73

Incorrect permission assignment in I-O DATA DEVICE, INC. UD-LT1

Priority LOW 29

Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00473 Published 2024-12-05 No fix listed CWE-732
TI-2018-00618 CVE-2018-0663 · GHSA-m444-29mg-hm99

Hard-coded credentials in I-O DATA DEVICE, INC. Multiple I-O DATA network camera products

Priority MEDIUM 41

Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier) use hardcoded credentials which may allow an remo…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01624 Published 2018-09-07 No fix listed CWE-798
TI-2018-00616 CVE-2018-0661 · GHSA-7w6m-jfjg-vq8f

Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier…

Priority LOW 39

Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier) allow an attacker on the same network segment to…

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00641 Published 2018-09-07 No fix listed
TI-2017-07973 CVE-2017-10875 · GHSA-32fg-cv9g-c28f

Memory corruption in I-O DATA DEVICE, INC. LAN DISK Connect

Priority LOW 35

I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01234 Published 2017-11-13 No fix listed CWE-119
TI-2017-01565 CVE-2017-2283 · GHSA-cqwm-2fcx-2wc7

Hard-coded credentials in I-O DATA DEVICE, INC. WN-G300R3

Priority LOW 36

WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the device.

CVSS 3.0HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00629 Published 2017-08-02 No fix listed CWE-798
TI-2017-01564 CVE-2017-2282 · GHSA-f9mr-4952-5j92

Memory corruption in I-O DATA DEVICE, INC. WN-AX1167GR

Priority LOW 31

Buffer overflow in WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary commands via unspecified vectors.

CVSS 3.0MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00662 Published 2017-08-02 No fix listed CWE-119
TI-2017-01563 CVE-2017-2281 · GHSA-f825-9462-xpqm

OS command injection in I-O DATA DEVICE, INC. WN-AX1167GR

Priority MEDIUM 40

WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00837 Published 2017-08-02 No fix listed CWE-78
TI-2017-01562 CVE-2017-2280 · GHSA-669p-r7m5-537j

Hard-coded credentials in I-O DATA DEVICE, INC. WN-AX1167GR

Priority MEDIUM 40

WN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the device.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00843 Published 2017-08-02 No fix listed CWE-798
TI-2017-01513 CVE-2017-2223 · GHSA-f6cr-72hv-6m28

Cross-site request forgery in I-O DATA DEVICE, INC. TS-WPTCAM

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM2 firmware version 1.01 and earlier allows remote attackers t…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00913 Published 2017-07-07 No fix listed CWE-352
TI-2016-06572 CVE-2016-7820 · GHSA-3v99-rpgw-rrch

Memory corruption in I-O DATA DEVICE, INC. TS-WRLP

Priority LOW 37

Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to cause a denial-of-service (DoS) or execute…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.03252 Published 2017-06-09 No fix listed CWE-119
TI-2016-06571 CVE-2016-7819 · GHSA-g62f-xp5c-89jw

OS command injection in I-O DATA DEVICE, INC. TS-WRLP

Priority LOW 36

I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02199 Published 2017-06-09 No fix listed CWE-78
TI-2016-06566 CVE-2016-7814 · GHSA-63x4-qqjh-3394

Information disclosure in I-O DATA DEVICE, INC. TS-WRLP

Priority LOW 38

I-O DATA DEVICE TS-WRLP firmware version 1.00.01 and earlier and TS-WRLA firmware version 1.00.01 and earlier allow remote attackers to obtain authentication credentials via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02663 Published 2017-06-09 No fix listed CWE-200
Load more