CVE:CVE-2018-0512
CNNVD:CNNVD-201802-259
I-O DATA DEVICE HDL-XR/XRW series等都是日本I-O DATA DEVICE公司的不同系列的网络附属存储设备。MagicalFinder是其中的一个IP地址设置工具。
多款I-O DATA DEVICE产品中的MagicalFinder存在操作系统命令注入漏洞。攻击者可利用该漏洞执行任意的操作系统命令。以下产品和版本受到影响：使用2.01及之前版本固件的HDL-XR/XRW series；使用2.01及之前版本固件的HDL-XR2U/XR2UW series；使用1.50及之前版本固件的HDL-XV/XVW series；使用1.37及之前版本固件的HDL-GT series；使用1.37之前版本固件的HDL-GTR series等。
solution:Upgrade iodata hdl-xr_firmware to a higher version than 2.01,and avoid the version (,2.01]; Upgrade iodata hdl-xrw_firmware to a higher version than 2.01,and avoid the version (,2.01]; Upgrade iodata hdl-xr2u_firmware to a higher version than 2.01,and avoid the version (,2.01]; Upgrade iodata hdl-xr2uw_firmware to a higher version than 2.01,and avoid the version (,2.01]; Upgrade iodata hdl-xv_firmware to a higher version than 1.50,and avoid the version (,1.50]; Upgrade iodata hdl-xvw_firmware to a higher version than 1.50,and avoid the version (,1.50]; Upgrade iodata hdl-gt_firmware to a higher version than 1.37,and avoid the version (,1.37]; Upgrade iodata hdl-gtr_firmware to a higher version than 1.37,and avoid the version (,1.37]; Upgrade iodata hdl-a_firmware to a higher version than 1.26,and avoid the version (,1.26]; Upgrade iodata hdl-ah_firmware to a higher version than 1.26,and avoid the version (,1.26]; Upgrade iodata hdl2-a_firmware to a higher version than 1.26,and avoid the version (,1.26]; Upgrade iodata hdl2-ah_firmware to a higher version than 1.26,and avoid the version (,1.26]; Upgrade iodata hdl-t_firmware to a higher version than 1.12,and avoid the version (,1.12]; Upgrade iodata hls-c_firmware to a higher version than 1.12,and avoid the version (,1.12]; Upgrade iodata hvl-a_firmware to a higher version than 2.04,and avoid the version (,2.04]; Upgrade iodata hvl-at_firmware to a higher version than 2.04,and avoid the version (,2.04]; Upgrade iodata hvl-ata_firmware to a higher version than 2.04,and avoid the version (,2.04]; Upgrade iodata hvl-s_firmware to a higher version than 1.00,and avoid the version (,1.00]; Upgrade iodata hfas1_firmware to a higher version than 1.40,and avoid the version (,1.40]; Upgrade iodata whg-napg_firmware to a higher version than 1.08,and avoid the version (,1.08]; Upgrade iodata whg-napga_firmware to a higher version than 1.08,and avoid the version (,1.08]; Upgrade iodata whg-napgal_firmware to a higher version than 1.05,and avoid the version (,1.05]; Upgrade iodata whg-ac1750a_firmware to a higher version than 3.00,and avoid the version (,3.00]; Upgrade iodata whg-ac1750_firmware to a higher version than 1.07,and avoid the version (,1.07]; Upgrade iodata whg-ac1750al_firmware to a higher version than 1.07,and avoid the version (,1.07]; Upgrade iodata wn-ax1167gr_firmware to a higher version than 3.11,and avoid the version (,3.11]; Upgrade iodata wn-gx300gr_firmware to a higher version than 2.00,and avoid the version (,2.00]; Upgrade iodata wnpr2600g_firmware to a higher version than 1.01,and avoid the version (,1.01]; Upgrade iodata wnpr1750g_firmware to a higher version than 1.01,and avoid the version (,1.01]; Upgrade iodata wnpr1167g_firmware to a higher version than 1.00,and avoid the version (,1.00]; Upgrade iodata wnpr1167f_firmware to a higher version than 1.00,and avoid the version (,1.00]; Upgrade iodata wn-ag750dgr_firmware to a higher version than 1.08,and avoid the version (,1.08]; Upgrade iodata wn-g300r_firmware to a higher version than 1.14,and avoid the version (,1.14]; Upgrade iodata wn-g300r3_firmware to a higher version than 1.04,and avoid the version (,1.04]; Upgrade iodata wn-ag300dgr_firmware to a higher version than 1.05,and avoid the version (,1.05]; Upgrade iodata wn-ac1600dgr_firmware to a higher version than 2.06,and avoid the version (,2.06]; Upgrade iodata wn-ac1167dgr_firmware to a higher version than 1.02,and avoid the version (,1.02]; Upgrade iodata wn-g300ex_firmware to a higher version than 1.01,and avoid the version (,1.01]; Upgrade iodata wn-ac1300ex_firmware to a higher version than 1.02,and avoid the version (,1.02]; Upgrade iodata wn-ac583trk_firmware to a higher version than 1.05,and avoid the version (,1.05]; Upgrade iodata wn-ac583rk_firmware to a higher version than 1.06,and avoid the version (,1.06]; Upgrade iodata wn-g300sr_firmware to a higher version than 1.00,and avoid the version (,1.00]; Upgrade iodata bx-vp1_firmware to a higher version than 2.01,and avoid the version (,2.01]; Upgrade iodata gv-ntx1_firmware to a higher version than 1.02.00,and avoid the version (,1.02.00]; Upgrade iodata gv-ntx2_firmware to a higher version than 1.02.00,and avoid the version (,1.02.00]