CVE-2025-32002
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 a…
Published: 2025-05-15 · CVSS: 9.3 · CVSS 4.0
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote Link3 function' is enabled. If exploited, a remote unauthenticated attacker may execute an arbitrary OS command.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7