CVE-2018-0663: Critical severity iodata ts-wrlp vulnerability

Q: What is the severity of CVE-2018-0663?

The severity of CVE-2018-0663 is critical with a CVSS score of 8.8.

Q: Which I-O DATA network camera products are affected by CVE-2018-0663?

I-O DATA network camera products TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, and TS-WRLP/E firmware Ver.1.09.04 and earlier are affected by CVE-2018-0663.

Q: What is the vulnerability description of CVE-2018-0663?

CVE-2018-0663 is a vulnerability in multiple I-O DATA network camera products that use hardcoded credentials, allowing a remote authenticated attacker to execute arbitrary OS commands on the device.

Q: How can an attacker exploit CVE-2018-0663?

An attacker can exploit CVE-2018-0663 by using the hardcoded credentials to authenticate remotely and then execute arbitrary OS commands on the vulnerable I-O DATA network camera.

Q: Are the TS-WRLP and TS-WRLP/E models vulnerable to CVE-2018-0663?

Yes, TS-WRLP and TS-WRLP/E models with firmware Ver.1.09.04 and earlier are vulnerable to CVE-2018-0663.

Published Sep 7, 2018

Updated

Multiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, TS-WRLP/E firmware Ver.1.09.04 and earlier) use hardcoded credentials which may allow an remote authenticated attacker to execute arbitrary OS commands on the device via unspecified vector.

Affected Software

6 affected components

Iodata Ts-wrlp Firmware<=1.09.04

Iodata Ts-wrlp

Iodata Ts-wrlp\/e Firmware<=1.09.04

Iodata Ts-wrlp\/e

Iodata Ts-wrla Firmware<=1.09.04

Iodata Ts-wrla

Event History

Sep 7, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0663?

The severity of CVE-2018-0663 is critical with a CVSS score of 8.8.

Which I-O DATA network camera products are affected by CVE-2018-0663?

I-O DATA network camera products TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA firmware Ver.1.09.04 and earlier, and TS-WRLP/E firmware Ver.1.09.04 and earlier are affected by CVE-2018-0663.

What is the vulnerability description of CVE-2018-0663?

CVE-2018-0663 is a vulnerability in multiple I-O DATA network camera products that use hardcoded credentials, allowing a remote authenticated attacker to execute arbitrary OS commands on the device.

How can an attacker exploit CVE-2018-0663?

An attacker can exploit CVE-2018-0663 by using the hardcoded credentials to authenticate remotely and then execute arbitrary OS commands on the vulnerable I-O DATA network camera.

Are the TS-WRLP and TS-WRLP/E models vulnerable to CVE-2018-0663?