# cve.now: I-o Data Device, Inc.

The newest entries naming I-o Data Device, Inc. as an affected vendor (up to 200), of 33 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2025-61865](https://cve.now/CVE-2025-61865.md): Multiple NAS management applications provided by I-O DATA DEVICE, INC. (CVSS 6.7)
- [CVE-2025-58116](https://cve.now/CVE-2025-58116.md): Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in WN-7D36QR and WN-7D36QR/UE. (CVSS 7.2)
- [CVE-2025-55075](https://cve.now/CVE-2025-55075.md): Hidden functionality issue exists in WN-7D36QR and WN-7D36QR/UE. (CVSS 4.9)
- [CVE-2025-32738](https://cve.now/CVE-2025-32738.md): Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlie (CVSS 5.3)
- [CVE-2025-32002](https://cve.now/CVE-2025-32002.md): Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard di (CVSS 9.8)
- [CVE-2025-26856](https://cve.now/CVE-2025-26856.md): Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008\_SE a (CVSS 7.2)
- [CVE-2025-23237](https://cve.now/CVE-2025-23237.md): Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008\_SE a (CVSS 6.6)
- [CVE-2025-22450](https://cve.now/CVE-2025-22450.md): Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008\_SE and earlier. (CVSS 7.5)
- [CVE-2025-20617](https://cve.now/CVE-2025-20617.md): Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008\_SE a (CVSS 7.2)
- [CVE-2024-52564](https://cve.now/CVE-2024-52564.md): Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 an (CVSS 7.5)
- [CVE-2024-47133](https://cve.now/CVE-2024-47133.md): UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier allow a remote authenticated attacker with an administrat (CVSS 7.2)
- [CVE-2024-45841](https://cve.now/CVE-2024-45841.md): Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 (CVSS 6.5)
- [CVE-2018-0663](https://cve.now/CVE-2018-0663.md): Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E fir (no CVSS)
- [CVE-2018-0662](https://cve.now/CVE-2018-0662.md): Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E fir (no CVSS)
- [CVE-2018-0661](https://cve.now/CVE-2018-0661.md): Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E fir (no CVSS)
- [CVE-2018-0512](https://cve.now/CVE-2018-0512.md): Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC. (no CVSS)
- [CVE-2017-10875](https://cve.now/CVE-2017-10875.md): I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vect (no CVSS)
- [CVE-2017-2283](https://cve.now/CVE-2017-2283.md): WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute ar (no CVSS)
- [CVE-2017-2282](https://cve.now/CVE-2017-2282.md): Buffer overflow in WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary commands via unspecified vectors. (no CVSS)
- [CVE-2017-2281](https://cve.now/CVE-2017-2281.md): WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors. (no CVSS)
- [CVE-2017-2280](https://cve.now/CVE-2017-2280.md): WN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute a (no CVSS)
- [CVE-2017-2223](https://cve.now/CVE-2017-2223.md): Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and ea (no CVSS)
- [CVE-2016-7820](https://cve.now/CVE-2016-7820.md): Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an a (no CVSS)
- [CVE-2016-7819](https://cve.now/CVE-2016-7819.md): I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with admini (no CVSS)
- [CVE-2016-7814](https://cve.now/CVE-2016-7814.md): I-O DATA DEVICE TS-WRLP firmware version 1.00.01 and earlier and TS-WRLA firmware version 1.00.01 and earlier allow remote attackers to obta (no CVSS)
- [CVE-2016-7807](https://cve.now/CVE-2016-7807.md): I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to bypass access restriction to access data on storage dev (no CVSS)
- [CVE-2016-7806](https://cve.now/CVE-2016-7806.md): I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors. (no CVSS)
- [CVE-2017-2148](https://cve.now/CVE-2017-2148.md): Cross-site scripting vulnerability in WN-AC1167GR firmware version 1.04 and earlier allows remote authenticated attackers to inject arbitrar (no CVSS)
- [CVE-2017-2142](https://cve.now/CVE-2017-2142.md): Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors. (no CVSS)
- [CVE-2017-2141](https://cve.now/CVE-2017-2141.md): WN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute arbitrary OS commands via unspecified vectors. (no CVSS)
- [CVE-2017-2113](https://cve.now/CVE-2017-2113.md): Buffer overflow in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, (no CVSS)
- [CVE-2017-2112](https://cve.now/CVE-2017-2112.md): TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware v (no CVSS)
- [CVE-2017-2111](https://cve.now/CVE-2017-2111.md): HTTP header injection vulnerability in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware versi (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/i-o-data-device
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.