Skip to content
OpenAdvisories
High · 7.2 CVE-2025-58116 EUVD-2025-29681GHSA-j2cx-6vg6-6fhw

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in WN-7D36QR and WN-7D36QR/UE. If t…

Published Sep 17, 2025 · Updated Sep 17, 2025 · Assigned by jpcert

Vendor: I-O DATA DEVICE Product: WN-7D36QR Product: WN-7D36QR/UE

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote authenticated attacker.

Affected products

VendorProductAffectedFixed
I-O DATA DEVICE WN-7D36QR firmware Ver.1.1.3 and prior versions —
I-O DATA DEVICE WN-7D36QR/UE firmware Ver.1.1.3 and prior versions —

References