I-O DATA HDL-TC1
Moderate fix1 remedy
cpe:2.3:o:iodata:hdl-t_firmware:*:*:*:*:*:*:*
Moderate fix1 remedy
- <= 1.21
I-O DATA HDL-T Series OS Command Injection Vulnerability
Vulnerability
Patched
An OS command injection vulnerability has been identified in I-O DATA network attached hard disks of the HDL-T Series, specifically in firmware versions through 1.21. This vulnerability arises when the 'Remote Link3 function' is enabled, allowing remote unauthenticated attackers to execute arbitrary OS commands.
Impact
Exploitation of this vulnerability allows for arbitrary OS command execution on the affected device.
Remediation
Users are advised to update the firmware to version 1.22, which addresses this vulnerability.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.3impact
10.0exploitability
7.0remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
5.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.