Log in Start free

I-O DATA DEVICE, INC.

Products

ProductCVEsExploitedLatest
UD-LT24–Feb 20, 2025
UD-LT13–Dec 5, 2024
UD-LT1/EX3–Dec 5, 2024
HDL-T2NV2–May 15, 2025
HDL-T2WH2–May 15, 2025
HDL-T3NV2–May 15, 2025
HDL-T3WH2–May 15, 2025
HDL-TC12–May 15, 2025
HDL-TC5002–May 15, 2025
WN-7D36QR/UE2–Sep 17, 2025
HDL-T1NV2–May 15, 2025
HDL-T1WH2–May 15, 2025
WN-7D36QR2–Sep 17, 2025
Clone for Windows1–Oct 23, 2025
NarSuS App1–Oct 23, 2025

Exploited and recent CVEs

  • CVE-2025-61865 Medium 6.7 Multiple NAS management applications provided by I-O DATA DEVICE, INC. register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive ma 0.2%
  • CVE-2025-61865 Medium 6.7 Multiple NAS management applications provided by I-O DATA DEVICE, INC. register Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive ma 0.2%
  • CVE-2025-58116 High 7.2 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, an arbitrary OS command may b 1.1%
  • CVE-2025-58116 High 7.2 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, an arbitrary OS command may b 1.1%
  • CVE-2025-55075 Medium 4.9 Hidden functionality issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, SSH may be enabled by a remote authenticated attacker. 0.3%
  • CVE-2025-55075 Medium 4.9 Hidden functionality issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, SSH may be enabled by a remote authenticated attacker. 0.3%
  • CVE-2025-32738 Medium 5.3 Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier. If exploited, a remote unauthenticated attacker may chang 0.4%
  • CVE-2025-32738 Medium 5.3 Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier. If exploited, a remote unauthenticated attacker may chang 0.4%
  • CVE-2025-32738 Medium 5.3 Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier. If exploited, a remote unauthenticated attacker may chang 0.4%
  • CVE-2025-32738 Medium 5.3 Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier. If exploited, a remote unauthenticated attacker may chang 0.4%
  • CVE-2025-32738 Medium 5.3 Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier. If exploited, a remote unauthenticated attacker may chang 0.4%
  • CVE-2025-32738 Medium 5.3 Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier. If exploited, a remote unauthenticated attacker may chang 0.4%
  • CVE-2025-32738 Medium 5.3 Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier. If exploited, a remote unauthenticated attacker may chang 0.4%
  • CVE-2025-32738 Medium 5.3 Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier. If exploited, a remote unauthenticated attacker may chang 0.4%
  • CVE-2025-32002 Critical 9.8 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote 1.6%
  • CVE-2025-32002 Critical 9.8 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote 1.6%
  • CVE-2025-32002 Critical 9.8 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote 1.6%
  • CVE-2025-32002 Critical 9.8 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote 1.6%
  • CVE-2025-32002 Critical 9.8 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote 1.6%
  • CVE-2025-32002 Critical 9.8 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote 1.6%
  • CVE-2025-32002 Critical 9.8 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote 1.6%
  • CVE-2025-32002 Critical 9.8 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote 1.6%
  • CVE-2025-26856 High 7.2 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. If an attacker logs in to the affected product w 1.1%
  • CVE-2025-23237 Medium 6.6 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. If a user logs in to CLI of the affected product 0.9%
  • CVE-2025-22450 High 7.5 Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. A remote attacker may disable the LAN-side firewall function of the affected products, and open specific 0.4%
  • CVE-2025-20617 High 7.2 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. If an attacker logs in to the affected product w 1.2%
  • CVE-2024-52564 High 7.5 Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier. A remote attacker may disable the firewall functi 0.6%
  • CVE-2024-52564 High 7.5 Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier. A remote attacker may disable the firewall functi 0.6%
  • CVE-2024-47133 High 7.2 UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier allow a remote authenticated attacker with an administrative account to execute arbitrary OS commands. 0.9%
  • CVE-2024-47133 High 7.2 UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier allow a remote authenticated attacker with an administrative account to execute arbitrary OS commands. 0.9%