CVE-2016-7819

HIGH

I-O DATA TS-WRLP and TS-WRLA <= 1.01.02 - Authenticated OS Command Injection

Title source: llm

Description

I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors.

References (3)

Core 3

Core References

Third Party Advisory, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/94594

Vendor Advisory x_refsource_confirm

http://www.iodata.jp/support/information/2016/ts-wrlap_2/

Third Party Advisory, VDB Entry third-party-advisory x_refsource_jvn

https://jvn.jp/en/jp/JVN25059363/index.html

Scores

CVSS v3 7.2

EPSS 0.0220

EPSS Percentile 80.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-78

Status published

Products (4)

I-O DATA DEVICE, INC./TS-WRLA firmware version 1.01.02 and earlier

I-O DATA DEVICE, INC./TS-WRLP firmware version 1.01.02 and earlier

iodata/ts-wrla_firmware < 1.01.02

iodata/ts-wrlp_firmware < 1.01.02

Published Jun 09, 2017

Tracked Since Feb 18, 2026