CVEvulnerability

CVE-2018-0512

6.8 MEDIUM Published 2018-02-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-02-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.8 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.7 HIGH — AV:A/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-78

Description

Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC. allow authenticated attackers to execute arbitrary OS commands via unspecified vectors.

Affected configurations

• iodata hdl-xr firmware (<= 2.01) • iodata hdl-xrw firmware (<= 2.01) • iodata hdl-xr2u firmware (<= 2.01) • iodata hdl-xr2uw firmware (<= 2.01) • iodata hdl-xv firmware (<= 1.50) • iodata hdl-xvw firmware (<= 1.50) • iodata hdl-gt firmware (<= 1.37) • iodata hdl-gtr firmware (<= 1.37) • iodata hdl-a firmware (<= 1.26) • iodata hdl-ah firmware (<= 1.26) • iodata hdl2-a firmware (<= 1.26) • iodata hdl2-ah firmware (<= 1.26) • iodata hdl-t firmware (<= 1.12) • iodata hls-c firmware (<= 1.12) • iodata hvl-a firmware (<= 2.04) • iodata hvl-at firmware (<= 2.04) • iodata hvl-ata firmware (<= 2.04) • iodata hvl-s firmware (<= 1.00) • iodata hfas1 firmware (<= 1.40) • iodata whg-napg firmware (<= 1.08) • iodata whg-napga firmware (<= 1.08) • iodata whg-napgal firmware (<= 1.05) • iodata whg-ac1750a firmware (<= 3.00) • iodata whg-ac1750 firmware (<= 1.07) • iodata whg-ac1750al firmware (<= 1.07) • iodata wn-ax1167gr firmware (<= 3.11) • iodata wn-gx300gr firmware (<= 2.00) • iodata wnpr2600g firmware (<= 1.01) • iodata wnpr1750g firmware (<= 1.01) • iodata wnpr1167g firmware (<= 1.00) • iodata wnpr1167f firmware (<= 1.00) • iodata wn-ag750dgr firmware (<= 1.08) • iodata wn-g300r firmware (<= 1.14) • iodata wn-g300r3 firmware (<= 1.04) • iodata wn-ag300dgr firmware (<= 1.05) • iodata wn-ac1600dgr firmware (<= 2.06) • iodata wn-ac1167dgr firmware (<= 1.02) • iodata wn-g300ex firmware (<= 1.01) • iodata wn-ac1300ex firmware (<= 1.02) • iodata wn-ac583trk firmware (<= 1.05) • iodata wn-ac583rk firmware (<= 1.06) • iodata wn-g300sr firmware (<= 1.00) • iodata bx-vp1 firmware (<= 2.01) • iodata gv-ntx1 firmware (<= 1.02.00) • iodata gv-ntx2 firmware (<= 1.02.00)

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References