CVE-2018-0663

HIGH

I-O DATA TS-WRLP, TS-WRLA, TS-WRLP/E < 1.09.04 - Authenticated OS Command Execution via Hardcoded Credentials

Title source: llm

Description

Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier) use hardcoded credentials which may allow an remote authenticated attacker to execute arbitrary OS commands on the device via unspecified vector.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

http://www.iodata.jp/support/information/2018/ts-wrlp/

Third Party Advisory third-party-advisory x_refsource_jvn

http://jvn.jp/en/jp/JVN83701666/index.html

Scores

CVSS v3 8.8

EPSS 0.0162

EPSS Percentile 73.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-798

Status published

Products (3)

iodata/ts-wrla_firmware < 1.09.04

iodata/ts-wrlp\/e_firmware < 1.09.04

iodata/ts-wrlp_firmware < 1.09.04

Published Sep 07, 2018

Tracked Since Feb 18, 2026