CVE-2018-0512

moderate-risk

Published 2018-02-08

Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC. allow authenticated attackers to execute arbitrary OS commands via unspecified vectors.

Do I need to act?

0.25% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.8/10 Medium

ADJACENT_NETWORK / LOW complexity

Affected Products (20)

Hdl-Xr Firmware

Hdl-Xrw Firmware

Hdl-Xr2U Firmware

Hdl-Xr2Uw Firmware

Hdl-Xv Firmware

Hdl-Xvw Firmware

Hdl-Gt Firmware

Hdl-Gtr Firmware

Hdl-A Firmware

Hdl-Ah Firmware

Hdl2-A Firmware

Hdl2-Ah Firmware

Hdl-T Firmware

Hls-C Firmware

Hvl-A Firmware

Hvl-At Firmware

Hvl-Ata Firmware

Hvl-S Firmware

Hfas1 Firmware

Whg-Napg Firmware

Affected Vendors

Iodata

References (4)

Vendor Advisory http://www.iodata.jp/support/information/2018/magicalfinder/

Third Party Advisory https://jvn.jp/en/jp/JVN36048131/index.html

Vendor Advisory http://www.iodata.jp/support/information/2018/magicalfinder/

Third Party Advisory https://jvn.jp/en/jp/JVN36048131/index.html

/ 100

moderate-risk

Severity 22/34 · High

Exploitability 1/34 · Minimal

Exposure 25/34 · High