Записи iodata
37 опубликованных записей вендора iodata.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 9
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')9
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer5
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-798 Use of Hard-coded Credentials3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
37 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
40В плане | CVE-2023-29804Эксплойта нет | WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the sys_smb_pwdmod function.iodata · wfs-sr03w firmware · CWE-78 | Высокая8,8 | — | 17,5 % | 14 апр. 2023 г. |
40В плане | CVE-2016-7806Эксплойта нет | I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors.iodata · wfs-sr01 firmware · CWE-78 | Критическая9,8 | — | 4,0 % | 9 июн. 2017 г. |
40В плане | CVE-2017-2142Эксплойта нет | Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.iodata · wn-g300r3 firmware · CWE-119 | Критическая9,8 | — | 3,1 % | 28 апр. 2017 г. |
40В плане | CVE-2023-29805Эксплойта нет | WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the pro_stor_canceltrans_handler_part_19 function.iodata · wfs-sr03w firmware · CWE-78 | Критическая9,8 | — | 2,4 % | 14 апр. 2023 г. |
36Наблюдать | CVE-2016-4845Proof of concept | Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0, HVL-AT4.0iodata · hvl-a2.0 firmware · CWE-352 | Высокая8,8 | — | 2,4 % | 24 сент. 2016 г. |
35Наблюдать | CVE-2017-2112Эксплойта нет | TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware viodata · ts-ptcam\/poe firmware · CWE-78 | Высокая8,8 | — | 1,7 % | 28 апр. 2017 г. |
35Наблюдать | CVE-2018-0663Эксплойта нет | Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firiodata · ts-wrlp firmware · CWE-798 | Высокая8,8 | — | 1,6 % | 7 сент. 2018 г. |
35Наблюдать | CVE-2017-2113Эксплойта нет | Buffer overflow in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier,iodata · ts-ptcam\/poe firmware · CWE-119 | Высокая8,8 | — | 1,6 % | 28 апр. 2017 г. |
35Наблюдать | CVE-2017-2223Эксплойта нет | Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and eaiodata · ts-wptcam camera firmware · CWE-352 | Высокая8,8 | — | 0,9 % | 7 июл. 2017 г. |
35Наблюдать | CVE-2017-2280Эксплойта нет | WN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute aiodata · wn-ax1167gr firmware · CWE-798 | Высокая8,8 | — | 0,8 % | 2 авг. 2017 г. |
35Наблюдать | CVE-2017-2281Эксплойта нет | WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.iodata · wn-ax1167gr firmware · CWE-78 | Высокая8,8 | — | 0,8 % | 2 авг. 2017 г. |
35Наблюдать | CVE-2018-0661Эксплойта нет | Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firiodata · ts-wrlp firmware | Высокая8,8 | — | 0,6 % | 7 сент. 2018 г. |
35Наблюдать | CVE-2016-4820Эксплойта нет | Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of arbiodata · etx-r firmware · CWE-352 | Высокая8,8 | — | 0,6 % | 18 июн. 2016 г. |
33Наблюдать | CVE-2019-19822Proof of concept | A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the corealtek · rtk 11n ap firmware · CWE-306 | Высокая7,5 | — | 8,7 % | 27 янв. 2020 г. |
32Наблюдать | CVE-2019-19823Proof of concept | A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords realtek · rtk 11n ap firmware · CWE-522 | Высокая7,5 | — | 6,4 % | 27 янв. 2020 г. |
32Наблюдать | CVE-2017-2283Эксплойта нет | WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute ariodata · wn-g300r3 firmware · CWE-798 | Высокая8,0 | — | 0,6 % | 2 авг. 2017 г. |
31Наблюдать | CVE-2016-7814Эксплойта нет | I-O DATA DEVICE TS-WRLP firmware version 1.00.01 and earlier and TS-WRLA firmware version 1.00.01 and earlier allow remote attackers to obtaiodata · ts-wrlp firmware · CWE-200 | Высокая7,5 | — | 2,7 % | 9 июн. 2017 г. |
31Наблюдать | CVE-2016-7807Эксплойта нет | I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to bypass access restriction to access data on storage deviodata · wfs-sr01 firmware · CWE-284 | Высокая7,5 | — | 2,0 % | 9 июн. 2017 г. |
30Наблюдать | CVE-2017-10875Эксплойта нет | I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vectiodata · lan disk connect firmware · CWE-119 | Высокая7,5 | — | 1,2 % | 13 нояб. 2017 г. |
30Наблюдать | CVE-2024-52564Эксплойта нет | Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 ani-o data device, inc. · ud-lt1 · CWE-1242 | Высокая7,5 | — | 0,6 % | 5 дек. 2024 г. |
29Наблюдать | CVE-2016-7820Эксплойта нет | Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an aiodata · ts-wrlp firmware · CWE-119 | Высокая7,2 | — | 3,3 % | 9 июн. 2017 г. |
29Наблюдать | CVE-2016-7819Эксплойта нет | I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with adminiiodata · ts-wrlp firmware · CWE-78 | Высокая7,2 | — | 2,2 % | 9 июн. 2017 г. |
28Наблюдать | CVE-2013-4712Эксплойта нет | I-O DATA DEVICE HDL-A and HDL2-A devices with firmware 1.07 and earlier do not properly manage sessions, which allows remote attackers to obiodata · hdl2-a\/e · CWE-399 | Средняя6,8 | — | 2,0 % | 19 окт. 2013 г. |
28Наблюдать | CVE-2017-2141Эксплойта нет | WN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute arbitrary OS commands via unspecified vectors.iodata · wn-g300r3 firmware · CWE-78 | Высокая7,2 | — | 1,6 % | 28 апр. 2017 г. |
28Наблюдать | CVE-2024-47133Эксплойта нет | UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier allow a remote authenticated attacker with an administrati-o data device, inc. · ud-lt1 · CWE-78 | Высокая7,2 | — | 0,9 % | 5 дек. 2024 г. |
- CVE-2023-2980440В плане
WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the sys_smb_pwdmod function.
ВысокаяCVSS 8,8Эксплойта нетEPSS 17 %iodata · wfs-sr03w firmware14 апр. 2023 г.
- CVE-2016-780640В плане
I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors.
КритическаяCVSS 9,8Эксплойта нетEPSS 4 %iodata · wfs-sr01 firmware9 июн. 2017 г.
- CVE-2017-214240В плане
Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %iodata · wn-g300r3 firmware28 апр. 2017 г.
- CVE-2023-2980540В плане
WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the pro_stor_canceltrans_handler_part_19 function.
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %iodata · wfs-sr03w firmware14 апр. 2023 г.
- CVE-2016-484536Наблюдать
Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0, HVL-AT4.0
ВысокаяCVSS 8,8Proof of conceptEPSS 2 %iodata · hvl-a2.0 firmware24 сент. 2016 г.
- CVE-2017-211235Наблюдать
TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware v
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %iodata · ts-ptcam\/poe firmware28 апр. 2017 г.
- CVE-2018-066335Наблюдать
Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E fir
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %iodata · ts-wrlp firmware7 сент. 2018 г.
- CVE-2017-211335Наблюдать
Buffer overflow in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier,
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %iodata · ts-ptcam\/poe firmware28 апр. 2017 г.
- CVE-2017-222335Наблюдать
Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and ea
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %iodata · ts-wptcam camera firmware7 июл. 2017 г.
- CVE-2017-228035Наблюдать
WN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute a
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %iodata · wn-ax1167gr firmware2 авг. 2017 г.
- CVE-2017-228135Наблюдать
WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %iodata · wn-ax1167gr firmware2 авг. 2017 г.
- CVE-2018-066135Наблюдать
Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E fir
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %iodata · ts-wrlp firmware7 сент. 2018 г.
- CVE-2016-482035Наблюдать
Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of arb
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %iodata · etx-r firmware18 июн. 2016 г.
- CVE-2019-1982233Наблюдать
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the co
ВысокаяCVSS 7,5Proof of conceptEPSS 9 %realtek · rtk 11n ap firmware27 янв. 2020 г.
- CVE-2019-1982332Наблюдать
A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords
ВысокаяCVSS 7,5Proof of conceptEPSS 6 %realtek · rtk 11n ap firmware27 янв. 2020 г.
- CVE-2017-228332Наблюдать
WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute ar
ВысокаяCVSS 8,0Эксплойта нетEPSS 1 %iodata · wn-g300r3 firmware2 авг. 2017 г.
- CVE-2016-781431Наблюдать
I-O DATA DEVICE TS-WRLP firmware version 1.00.01 and earlier and TS-WRLA firmware version 1.00.01 and earlier allow remote attackers to obta
ВысокаяCVSS 7,5Эксплойта нетEPSS 3 %iodata · ts-wrlp firmware9 июн. 2017 г.
- CVE-2016-780731Наблюдать
I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to bypass access restriction to access data on storage dev
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %iodata · wfs-sr01 firmware9 июн. 2017 г.
- CVE-2017-1087530Наблюдать
I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vect
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %iodata · lan disk connect firmware13 нояб. 2017 г.
- CVE-2024-5256430Наблюдать
Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 an
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %i-o data device, inc. · ud-lt15 дек. 2024 г.
- CVE-2016-782029Наблюдать
Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an a
ВысокаяCVSS 7,2Эксплойта нетEPSS 3 %iodata · ts-wrlp firmware9 июн. 2017 г.
- CVE-2016-781929Наблюдать
I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with admini
ВысокаяCVSS 7,2Эксплойта нетEPSS 2 %iodata · ts-wrlp firmware9 июн. 2017 г.
- CVE-2013-471228Наблюдать
I-O DATA DEVICE HDL-A and HDL2-A devices with firmware 1.07 and earlier do not properly manage sessions, which allows remote attackers to ob
СредняяCVSS 6,8Эксплойта нетEPSS 2 %iodata · hdl2-a\/e19 окт. 2013 г.
- CVE-2017-214128Наблюдать
WN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute arbitrary OS commands via unspecified vectors.
ВысокаяCVSS 7,2Эксплойта нетEPSS 2 %iodata · wn-g300r3 firmware28 апр. 2017 г.
- CVE-2024-4713328Наблюдать
UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier allow a remote authenticated attacker with an administrat
ВысокаяCVSS 7,2Эксплойта нетEPSS 1 %i-o data device, inc. · ud-lt15 дек. 2024 г.