{"schemaVersion":3,"id":"CVE-2017-2113","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Buffer overflow in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and earlier, TS-PTCAM firmware version 1.18 and earlier, TS-PTCAM/POE firmware version 1.18 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.","dates":{"published":"2017-04-28T16:00:00.000Z","modified":"2024-08-05T13:39:32.341Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":8.3,"severity":"high","vector":"AV:A/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01592,"percentile":0.75489,"severity":"low","asOf":"2026-10-22T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-22T00:00:00.000Z","baselineScore":0.01592},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01266,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-22T00:00:00.000Z","score":0.01592,"percentile":0.75489}],"last30":[{"date":"2026-09-22T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.01592,"percentile":null},{"date":"2026-10-22T00:00:00.000Z","score":0.01592,"percentile":0.75489}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"i-o data device, inc.","product":"ts-ptcam/poe","name":"TS-PTCAM/POE","label":"ts-ptcam/poe","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"firmware version 1.18 and earlier","noFixRecorded":false,"fixedIn":null}],"versionsText":"firmware version 1.18 and earlier","eol":null,"hubHref":"/vendor/i-o_data_device_inc/ts-ptcampoe"},{"vendor":"i-o data device, inc.","product":"ts-wlc2","name":"TS-WLC2","label":"ts-wlc2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"firmware version 1.18 and earlier","noFixRecorded":false,"fixedIn":null}],"versionsText":"firmware version 1.18 and earlier","eol":null,"hubHref":"/vendor/i-o_data_device_inc/ts-wlc2"},{"vendor":"i-o data device, inc.","product":"ts-wlce","name":"TS-WLCE","label":"ts-wlce","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"firmware version 1.18 and earlier","noFixRecorded":false,"fixedIn":null}],"versionsText":"firmware version 1.18 and earlier","eol":null,"hubHref":"/vendor/i-o_data_device_inc/ts-wlce"},{"vendor":"i-o data device, inc.","product":"ts-wptcam","name":"TS-WPTCAM","label":"ts-wptcam","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"firmware version 1.18 and earlier","noFixRecorded":false,"fixedIn":null}],"versionsText":"firmware version 1.18 and earlier","eol":null,"hubHref":"/vendor/i-o_data_device_inc/ts-wptcam"},{"vendor":"i-o data device, inc.","product":"ts-wptcam2","name":"TS-WPTCAM2","label":"ts-wptcam2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"firmware version 1.00","noFixRecorded":false,"fixedIn":null}],"versionsText":"firmware version 1.00","eol":null,"hubHref":"/vendor/i-o_data_device_inc/ts-wptcam2"},{"vendor":"i-o data device, inc.","product":"ts-wrlc","name":"TS-WRLC","label":"ts-wrlc","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"firmware version 1.17 and earlier","noFixRecorded":false,"fixedIn":null}],"versionsText":"firmware version 1.17 and earlier","eol":null,"hubHref":"/vendor/i-o_data_device_inc/ts-wrlc"},{"vendor":"iodata","product":"ts-ptcam_firmware","name":"ts-ptcam firmware","label":"ts-ptcam_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≤ 1.18","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.18","eol":null,"hubHref":"/vendor/iodata/ts-ptcam"},{"vendor":"iodata","product":"ts-ptcam\\/poe_firmware","name":"ts-ptcam\\/poe firmware","label":"ts-ptcam\\/poe_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≤ 1.18","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.18","eol":null,"hubHref":"/vendor/iodata/ts-ptcampoe"},{"vendor":"iodata","product":"ts-wlc2_firmware","name":"ts-wlc2 firmware","label":"ts-wlc2_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≤ 1.18","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.18","eol":null,"hubHref":"/vendor/iodata/ts-wlc2"},{"vendor":"iodata","product":"ts-wlce_firmware","name":"ts-wlce firmware","label":"ts-wlce_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≤ 1.18","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.18","eol":null,"hubHref":"/vendor/iodata/ts-wlce"},{"vendor":"iodata","product":"ts-wptcam_firmware","name":"ts-wptcam firmware","label":"ts-wptcam_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≤ 1.18","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.18","eol":null,"hubHref":"/vendor/iodata/ts-wptcam"},{"vendor":"iodata","product":"ts-wptcam2_firmware","name":"ts-wptcam2 firmware","label":"ts-wptcam2_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"1.00","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.00","eol":null,"hubHref":"/vendor/iodata/ts-wptcam2"},{"vendor":"iodata","product":"ts-wrlc_firmware","name":"ts-wrlc firmware","label":"ts-wrlc_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≤ 1.17","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.17","eol":null,"hubHref":"/vendor/iodata/ts-wrlc"}],"affectedCount":13,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://jvn.jp/en/jp/JVN46830433/index.html","label":"jvn.jp/en/jp/JVN46830433/index.html","hostname":"jvn.jp","tags":["Third Party Advisory","X Refsource JVN","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/96620","label":"www.securityfocus.com/bid/96620","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://www.iodata.jp/support/information/2017/camera201702/","label":"www.iodata.jp/support/information/2017/camera201702/","hostname":"www.iodata.jp","tags":["X Refsource MISC","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2017-04-28T16:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T13:39:32.341Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":36,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T17:29:28.200Z","stale":false,"partial":false}}