I O DATA Device, INC. vulnerabilities, page 2
33 vulnerabilities
Known vulnerabilities in I O DATA Device, INC. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 31 products.
MediumCVE-2017-2111i-o data device, inc. · ts-ptcam/poe +12 morei-o data device, inc. ts-ptcam/poeHTTP header injection vulnerability in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and earlier, TS-PTCAM firmware version 1.18 and earlier, TS-PTCAM/POE firmware version 1.18 and earlier may allow a remote attackers to display false information.EPSS1.20%HighCVE-2017-2113i-o data device, inc. · ts-ptcam/poe +12 morei-o data device, inc. ts-ptcam/poeBuffer overflow in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and earlier, TS-PTCAM firmware version 1.18 and earlier, TS-PTCAM/POE firmware version 1.18 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.EPSS1.59%HighCVE-2017-2280i-o data device, inc. · wn-ax1167gr +1 morei-o data device, inc. wn-ax1167grWN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the device.EPSS0.84%CriticalCVE-2017-2141i-o data device, inc. · wn-g300r3 +1 morei-o data device, inc. wn-g300r3WN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute arbitrary OS commands via unspecified vectors.EPSS1.63%HighCVE-2017-2283i-o data device, inc. · wn-g300r3 +1 morei-o data device, inc. wn-g300r3WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the device.EPSS0.63%MediumCVE-2017-2282i-o data device, inc. · wn-ax1167gr +1 morei-o data device, inc. wn-ax1167grBuffer overflow in WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary commands via unspecified vectors.EPSS0.66%HighCVE-2017-2112i-o data device, inc. · ts-ptcam/poe +12 morei-o data device, inc. ts-ptcam/poeTS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and earlier, TS-PTCAM firmware version 1.18 and earlier, TS-PTCAM/POE firmware version 1.18 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.EPSS1.66%HighCVE-2017-2223i-o data device, inc. · ts-ptcam +13 morei-o data device, inc. ts-ptcamCross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM2 firmware version 1.01 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.EPSS0.91%HighCVE-2017-2281i-o data device, inc. · wn-ax1167gr +1 morei-o data device, inc. wn-ax1167grWN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.EPSS0.84%HighCVE-2017-10875i-o data device, inc. · lan disk connect +1 morei-o data device, inc. lan disk connectI-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vectors.EPSS1.23%HighCVE-2024-52564i-o data device, inc. · ud-lt1 +1 morei-o data device, inc. ud-lt1Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier. A remote attacker may disable the firewall function of the affected products. As a result, an arbitrary OS command may be executed and/or configuration settings of the device may be altered.EPSS0.57%HighCVE-2024-47133i-o data device, inc. · ud-lt1 +1 morei-o data device, inc. ud-lt1UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier allow a remote authenticated attacker with an administrative account to execute arbitrary OS commands.EPSS0.90%MediumCVE-2024-45841i-o data device, inc. · ud-lt1 +1 morei-o data device, inc. ud-lt1Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier. If an attacker with the guest account of the affected products accesses a specific file, the information containing credentials may be obtained.EPSS0.47%