Iodata vulnerabilities
35 vulnerabilities
Known vulnerabilities in Iodata products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 87 products.
Products
50 of 87- Ts Wrla6 vulnerabilities
- Ts Wrlp6 vulnerabilities
- Wn G300R35 vulnerabilities
- Ts Wptcam24 vulnerabilities
- Wn Ax1167Gr4 vulnerabilities
- Ts Ptcam3 vulnerabilities
- Ts Ptcam\/Poe3 vulnerabilities
- Ts Wlc23 vulnerabilities
- Ts Wlce3 vulnerabilities
- Ts Wptcam3 vulnerabilities
- Ts Wrlc3 vulnerabilities
- Ts Wrlp\/E3 vulnerabilities
- Etx R2 vulnerabilities
- Hdl A2 vulnerabilities
- Hdl Ah2 vulnerabilities
- Hdl2 A2 vulnerabilities
- Hdl2 Ah2 vulnerabilities
- Rockdisk2 vulnerabilities
- Ts Ptcam Camera2 vulnerabilities
- Ts Ptcam\/Poe Camera2 vulnerabilities
- Ts Wlc2 Camera2 vulnerabilities
- Ts Wptcam Camera2 vulnerabilities
- Wfs Sr012 vulnerabilities
- Wfs Sr03K2 vulnerabilities
- Wfs Sr03W2 vulnerabilities
- Wn Ac1167R Firmwre2 vulnerabilities
- Wn G300R2 vulnerabilities
- Bx Vp11 vulnerabilities
- Gv Ntx11 vulnerabilities
- Gv Ntx21 vulnerabilities
- Hdl A\/E1 vulnerabilities
- Hdl As1 vulnerabilities
- Hdl Gt1 vulnerabilities
- Hdl Gtr1 vulnerabilities
- Hdl T1 vulnerabilities
- Hdl Xr1 vulnerabilities
- Hdl Xr2U1 vulnerabilities
- Hdl Xr2Uw1 vulnerabilities
- Hdl Xrw1 vulnerabilities
- Hdl Xv1 vulnerabilities
- Hdl Xvw1 vulnerabilities
- Hdl2 A\/E1 vulnerabilities
- Hfas11 vulnerabilities
- Hls C1 vulnerabilities
- Hvl A1 vulnerabilities
- Hvl A2.01 vulnerabilities
- Hvl A3.01 vulnerabilities
- Hvl A4.01 vulnerabilities
- Hvl At1 vulnerabilities
- Hvl At1.0S1 vulnerabilities
CVE-2018-0512i-o data device, inc.ip address setting tool "magicalfinder"+45
EPSS score0.66%
Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC. allow authenticated attackers to execute arbitrary OS commands via unspecified vectors.CVE-2018-0662i-o data device, inc.multiple i-o data network camera products+3EPSS score0.42%
Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier) allow an attacker on the same network segment to add malicious files on the device and execute arbitrary code.CVE-2018-0661i-o data device, inc.multiple i-o data network camera products+3EPSS score0.64%
Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier) allow an attacker on the same network segment to bypass access restriction to add files on a specific directory that may result in executing arbitrary OS commands/code or information including credentials leakage or alteration.CVE-2018-0663i-o data device, inc.multiple i-o data network camera products+3EPSS score1.62%
Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier) use hardcoded credentials which may allow an remote authenticated attacker to execute arbitrary OS commands on the device via unspecified vector.CVE-2013-4712iodatahdl-a_firmware+6EPSS score2.02%
I-O DATA DEVICE HDL-A and HDL2-A devices with firmware 1.07 and earlier do not properly manage sessions, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.CVE-2013-4713iodatarockdisk_firmwareEPSS score1.40%
Cross-site scripting (XSS) vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.CVE-2015-2984iodatawn-g54\/r2_firmwareEPSS score1.60%
I-O DATA DEVICE WN-G54/R2 routers with firmware before 1.03 and NP-BBRS routers allow remote attackers to cause a denial of service (SSDP reflection) via UPnP requests.CVE-2016-1206iodatawn-gdn\/r3_firmwareEPSS score0.63%
The WPS implementation on I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices does not limit PIN guesses, which allows remote attackers to obtain network access via a brute-force attack.CVE-2016-1207iodatawn-g300r_firmware+2EPSS score0.80%
Cross-site scripting (XSS) vulnerability on I-O DATA DEVICE WN-G300R devices with firmware 1.12 and earlier, WN-G300R2 devices with firmware 1.12 and earlier, and WN-G300R3 devices with firmware 1.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.CVE-2016-4845iodatahvl-a2.0_firmware+9EPSS score2.38%
Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0, HVL-AT4.0, HVL-AT2.0A, HVL-AT3.0A, and HVL-AT4.0A devices with firmware before 2.04 allows remote attackers to hijack the authentication of arbitrary users for requests that delete content.CVE-2016-4820iodataetx-r_firmwareEPSS score0.63%
Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of arbitrary users.CVE-2016-4821iodataetx-r_firmwareEPSS score1.60%
I-O DATA DEVICE ETX-R devices allow remote attackers to cause a denial of service (web-server crash) via unspecified vectors.CVE-2016-7820i-o data device, inc.ts-wrla+3EPSS score3.25%
Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to cause a denial-of-service (DoS) or execute arbitrary code via unspecified vectors.CVE-2016-7819i-o data device, inc.ts-wrla+3EPSS score2.20%
I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors.CVE-2016-7814i-o data device, inc.ts-wrla+3EPSS score2.66%
I-O DATA DEVICE TS-WRLP firmware version 1.00.01 and earlier and TS-WRLA firmware version 1.00.01 and earlier allow remote attackers to obtain authentication credentials via unspecified vectors.CVE-2016-7807i-o data device, inc.wfs-sr01+1EPSS score2.02%
I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to bypass access restriction to access data on storage devices inserted into the product via unspecified vectors.CVE-2016-7806i-o data device, inc.wfs-sr01+1EPSS score3.98%
I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors.CVE-2014-3887iodatarockdisk_firmwareEPSS score0.64%
Cross-site scripting (XSS) vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-4713.CVE-2014-3895iodatats-ptcam_camera_firmware+5EPSS score2.20%
The I-O DATA TS-WLCAM camera with firmware 1.06 and earlier, TS-WLCAM/V camera with firmware 1.06 and earlier, TS-WPTCAM camera with firmware 1.08 and earlier, TS-PTCAM camera with firmware 1.08 and earlier, TS-PTCAM/POE camera with firmware 1.08 and earlier, and TS-WLC2 camera with firmware 1.02 and earlier allow remote attackers to bypass authentication, and consequently obtain sensitive credential and configuration data, via unspecified vectors.CVE-2017-2148i-o data device, inc.wn-ac1167gr+1EPSS score0.89%
Cross-site scripting vulnerability in WN-AC1167GR firmware version 1.04 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.