Vulnerabilities > Iodata > WN G300R3 Firmware > 1.01

DATE CVE VULNERABILITY TITLE RISK
2018-02-08 CVE-2018-0512 OS Command Injection vulnerability in Iodata products
Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC.
low complexity
iodata CWE-78
6.8
2017-04-28 CVE-2017-2142 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Iodata Wn-G300R3 Firmware 1.01/1.03
Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
network
low complexity
iodata CWE-119
critical
9.8
2017-04-28 CVE-2017-2141 OS Command Injection vulnerability in Iodata Wn-G300R3 Firmware 1.01/1.03
WN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute arbitrary OS commands via unspecified vectors.
network
low complexity
iodata CWE-78
7.2
2016-05-14 CVE-2016-1207 Cross-site Scripting vulnerability in Iodata products
Cross-site scripting (XSS) vulnerability on I-O DATA DEVICE WN-G300R devices with firmware 1.12 and earlier, WN-G300R2 devices with firmware 1.12 and earlier, and WN-G300R3 devices with firmware 1.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
network
low complexity
iodata CWE-79
5.4