Skip to content
Noroxi

iodata records

37 published records for vendor iodata.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
9
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 20
  4. 23
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

37 records
  • CVE-2023-29804
    40Plan

    WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the sys_smb_pwdmod function.

    HighCVSS 8.8No exploitEPSS 17%

    iodata · wfs-sr03w firmwareApr 14, 2023

  • CVE-2016-7806
    40Plan

    I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors.

    CriticalCVSS 9.8No exploitEPSS 4%

    iodata · wfs-sr01 firmwareJun 9, 2017

  • CVE-2017-2142
    40Plan

    Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.

    CriticalCVSS 9.8No exploitEPSS 3%

    iodata · wn-g300r3 firmwareApr 28, 2017

  • CVE-2023-29805
    40Plan

    WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the pro_stor_canceltrans_handler_part_19 function.

    CriticalCVSS 9.8No exploitEPSS 2%

    iodata · wfs-sr03w firmwareApr 14, 2023

  • CVE-2016-4845
    36Monitor

    Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0, HVL-AT1.0S, HVL-AT2.0, HVL-AT3.0, HVL-AT4.0

    HighCVSS 8.8Proof of conceptEPSS 2%

    iodata · hvl-a2.0 firmwareSep 24, 2016

  • CVE-2017-2112
    35Monitor

    TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware v

    HighCVSS 8.8No exploitEPSS 2%

    iodata · ts-ptcam\/poe firmwareApr 28, 2017

  • CVE-2018-0663
    35Monitor

    Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E fir

    HighCVSS 8.8No exploitEPSS 2%

    iodata · ts-wrlp firmwareSep 7, 2018

  • CVE-2017-2113
    35Monitor

    Buffer overflow in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier,

    HighCVSS 8.8No exploitEPSS 2%

    iodata · ts-ptcam\/poe firmwareApr 28, 2017

  • CVE-2017-2223
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and ea

    HighCVSS 8.8No exploitEPSS 1%

    iodata · ts-wptcam camera firmwareJul 7, 2017

  • CVE-2017-2280
    35Monitor

    WN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute a

    HighCVSS 8.8No exploitEPSS 1%

    iodata · wn-ax1167gr firmwareAug 2, 2017

  • CVE-2017-2281
    35Monitor

    WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.

    HighCVSS 8.8No exploitEPSS 1%

    iodata · wn-ax1167gr firmwareAug 2, 2017

  • CVE-2018-0661
    35Monitor

    Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E fir

    HighCVSS 8.8No exploitEPSS 1%

    iodata · ts-wrlp firmwareSep 7, 2018

  • CVE-2016-4820
    35Monitor

    Cross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE ETX-R devices allows remote attackers to hijack the authentication of arb

    HighCVSS 8.8No exploitEPSS 1%

    iodata · etx-r firmwareJun 18, 2016

  • CVE-2019-19822
    33Monitor

    A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the co

    HighCVSS 7.5Proof of conceptEPSS 9%

    realtek · rtk 11n ap firmwareJan 27, 2020

  • CVE-2019-19823
    32Monitor

    A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords

    HighCVSS 7.5Proof of conceptEPSS 6%

    realtek · rtk 11n ap firmwareJan 27, 2020

  • CVE-2017-2283
    32Monitor

    WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute ar

    HighCVSS 8.0No exploitEPSS 1%

    iodata · wn-g300r3 firmwareAug 2, 2017

  • CVE-2016-7814
    31Monitor

    I-O DATA DEVICE TS-WRLP firmware version 1.00.01 and earlier and TS-WRLA firmware version 1.00.01 and earlier allow remote attackers to obta

    HighCVSS 7.5No exploitEPSS 3%

    iodata · ts-wrlp firmwareJun 9, 2017

  • CVE-2016-7807
    31Monitor

    I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to bypass access restriction to access data on storage dev

    HighCVSS 7.5No exploitEPSS 2%

    iodata · wfs-sr01 firmwareJun 9, 2017

  • CVE-2017-10875
    30Monitor

    I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vect

    HighCVSS 7.5No exploitEPSS 1%

    iodata · lan disk connect firmwareNov 13, 2017

  • CVE-2024-52564
    30Monitor

    Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 an

    HighCVSS 7.5No exploitEPSS 1%

    i-o data device, inc. · ud-lt1Dec 5, 2024

  • CVE-2016-7820
    29Monitor

    Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an a

    HighCVSS 7.2No exploitEPSS 3%

    iodata · ts-wrlp firmwareJun 9, 2017

  • CVE-2016-7819
    29Monitor

    I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with admini

    HighCVSS 7.2No exploitEPSS 2%

    iodata · ts-wrlp firmwareJun 9, 2017

  • CVE-2013-4712
    28Monitor

    I-O DATA DEVICE HDL-A and HDL2-A devices with firmware 1.07 and earlier do not properly manage sessions, which allows remote attackers to ob

    MediumCVSS 6.8No exploitEPSS 2%

    iodata · hdl2-a\/eOct 19, 2013

  • CVE-2017-2141
    28Monitor

    WN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute arbitrary OS commands via unspecified vectors.

    HighCVSS 7.2No exploitEPSS 2%

    iodata · wn-g300r3 firmwareApr 28, 2017

  • CVE-2024-47133
    28Monitor

    UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier allow a remote authenticated attacker with an administrat

    HighCVSS 7.2No exploitEPSS 1%

    i-o data device, inc. · ud-lt1Dec 5, 2024