Skip to content
OpenAdvisories
Unscored CVE-2017-2111 EUVD-2017-11294GHSA-p83q-qmcg-vf64

HTTP header injection vulnerability in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware vers…

Published Apr 28, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: I-O DATA DEVICE Product: TS-PTCAM/POE Product: TS-WLC2 Product: TS-WLCE Product: TS-WPTCAM Product: TS-WPTCAM2 Product: TS-WRLC

Description

HTTP header injection vulnerability in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and earlier, TS-PTCAM firmware version 1.18 and earlier, TS-PTCAM/POE firmware version 1.18 and earlier may allow a remote attackers to display false information.

Affected products

VendorProductAffectedFixed
I-O DATA DEVICE TS-WPTCAM firmware version 1.18 and earlier —
I-O DATA DEVICE TS-WPTCAM2 firmware version 1.00 —
I-O DATA DEVICE TS-WLCE firmware version 1.18 and earlier —
I-O DATA DEVICE TS-WLC2 firmware version 1.18 and earlier —
I-O DATA DEVICE TS-WRLC firmware version 1.17 and earlier —
I-O DATA DEVICE TS-PTCAM/POE firmware version 1.18 and earlier —

References