I-O DATA DEVICE vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2025-61865 Multiple NAS management applications provided by I-O DATA DEVICE, INC.High 8.4 · Oct 23, 2025
• CVE-2025-58116 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in WN-7D36QR and WN-7D36QR/UE.High 8.6 · Sep 17, 2025
• CVE-2025-32002 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' fiCritical 9.3 · May 15, 2025
• CVE-2025-26856 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier.High 7.2 · Feb 20, 2025
• CVE-2025-22450 Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier.High 7.5 · Jan 22, 2025
• CVE-2025-20617 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier.High 7.2 · Jan 22, 2025
• CVE-2024-52564 Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier.High 7.5 · Dec 5, 2024
• CVE-2024-47133 UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier allow a remote authenticated attacker with an administrative account to execuHigh 7.2 · Dec 5, 2024
• CVE-2018-0663 Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 anHigh 8.8 · Sep 7, 2018
• CVE-2018-0661 Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 anHigh 8.8 · Sep 7, 2018
• CVE-2017-10875 I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vectors.High 7.5 · Nov 13, 2017
• CVE-2017-2283 WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the High 8 · Aug 2, 2017
• CVE-2017-2281 WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.High 8.8 · Aug 2, 2017
• CVE-2017-2280 WN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on theHigh 8.8 · Aug 2, 2017
• CVE-2017-2223 Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM2High 8.8 · Jul 7, 2017
• CVE-2016-7820 Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with adminisHigh 7.2 · Jun 9, 2017
• CVE-2016-7819 I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to exHigh 7.2 · Jun 9, 2017
• CVE-2016-7814 I-O DATA DEVICE TS-WRLP firmware version 1.00.01 and earlier and TS-WRLA firmware version 1.00.01 and earlier allow remote attackers to obtain authentication crHigh 7.5 · Jun 9, 2017
• CVE-2016-7807 I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to bypass access restriction to access data on storage devices inserted into tHigh 7.5 · Jun 9, 2017
• CVE-2016-7806 I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors.Critical 9.8 · Jun 9, 2017
• CVE-2017-2142 Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.Critical 9.8 · Apr 28, 2017
• CVE-2017-2141 WN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute arbitrary OS commands via unspecified vectors.High 7.2 · Apr 28, 2017
• CVE-2017-2113 Buffer overflow in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware veHigh 8.8 · Apr 28, 2017
• CVE-2017-2112 TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlHigh 8.8 · Apr 28, 2017
• CVE-2015-0869 I-O DATA DEVICE NP-BBRM routers allow remote attackers to cause a denial of service (SSDP reflection) via UPnP requests.High 7.8 · Feb 1, 2015