I-O Data Wireless LAN Routers OS Command Injection Vulnerability
Vulnerability
An OS command injection vulnerability has been identified in I-O Data wireless LAN routers WN-7D36QR and WN-7D36QR/UE, both running firmware through version 1.1.3. This vulnerability allows a remote authenticated attacker to execute arbitrary OS commands on the device.
Impact
Exploitation of this vulnerability allows for arbitrary OS command execution by a remote authenticated attacker.
Remediation
Users are advised to update the router's firmware to version 2.1.3. Firmware download instructions are available on the I-O Data support website.
Added: Sep 17, 2025, 4:21 AM
Updated: Sep 17, 2025, 4:21 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
5.2remediation
7.7relevance
0.6threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.