Iodata Wn-g300r3 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Iodata Wn-g300r3 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2017-2142 — CVSS 9.8 (critical): Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
• CVE-2017-2283 — CVSS 8.0 (high): WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute…
• CVE-2017-2141 — CVSS 7.2 (high): WN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute arbitrary OS commands via unspecified vectors.
• CVE-2018-0512 — CVSS 6.8 (medium): Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC. allow authenticated attackers to execute arbitrary…
• CVE-2016-1207 — CVSS 5.4 (medium): Cross-site scripting (XSS) vulnerability on I-O DATA DEVICE WN-G300R devices with firmware 1.12 and earlier, WN-G300R2 devices with…