CVE-2018-0663 Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier) use hardcoded credentials whi...
HighCVSS 8.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier) use hardcoded credentials which may allow an remote authenticated attacker to execute arbitrary OS commands on the device via unspecified vector.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iodata ts-wrlp firmware | <= 1.09.04 | No fix listed |
| iodata ts-wrlpe firmware | <= 1.09.04 | No fix listed |
| iodata ts-wrla firmware | <= 1.09.04 | No fix listed |
| i-o data device Multiple I-O DATA network camera products | = (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier) | No fix listed |
References
- JVN#83701666 third-party-advisory
- www.iodata.jp vendor-advisory