CVE-2016-7806
CRITICALI-O DATA WFS-SR01 Firmware <= 1.10 - OS Command Injection
Title source: llmDescription
I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry third-party-advisory
x_refsource_jvn
https://jvn.jp/en/jp/JVN18228200/index.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/94089
Patch, Vendor Advisory x_refsource_confirm
http://www.iodata.jp/support/information/2016/wfs-sr01/
Scores
CVSS v3
9.8
EPSS
0.0398
EPSS Percentile
89.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-78
Status
published
Products (2)
I-O DATA DEVICE, INC./WFS-SR01
firmware version 1.10 and earlier
iodata/wfs-sr01_firmware
< 1.10
Published
Jun 09, 2017
Tracked Since
Feb 18, 2026