CVE-2025-32738

Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier. If exploited, a remote unauthenticated attacker may change the product settings...

PT-2025-21797 · Ibm · Ibm I +1

Name of the Vulnerable Software and Affected Versions: IBM i versions 7.2 through 7.6 Description: A privilege escalation issue exists in the IBM TCP/IP Connectivity Utilities for i product, allowing a malicious actor with command line access to the host operating system to elevate privileges and...

IBM i security vulnerabilities

IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i that stems from improper command line access, which could lead to elevation of privilege...

CVE-2025-33103: Execution with Unnecessary Privileges

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 product IBM TCP/IP Connectivity Utilities for i contains a privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system...

CVE-2025-32738

Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier. If exploited, a remote unauthenticated attacker may change the product settings...

CVE-2025-32002

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote Link3 function' is enabled. If exploited, a remote unauthenticated attacker may execute an arbitra...

CVE-2025-32738

Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier. If exploited, a remote unauthenticated attacker may change the product settings...

CVE-2025-32738

Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier. If exploited, a remote unauthenticated attacker may change the product settings...

CVE-2025-32738

CVE-2025-32738 affects I-O DATA HDL-T Series network-attached HDDs with firmware versions 1.21 and earlier. The flaw is a missing authentication for a critical function, enabling a remote unauthenticated attacker to change product settings. Public sources (JVNDB/Red Hat/US CVE feeds) confirm the ...

CVE-2025-32002

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier when 'Remote Link3 function' is enabled. If exploited, a remote unauthenticated attacker may execute an arbitra...

CVE-2025-32002

The CVE-2025-32002 issue affects I-O DATA HDL-T Series network attached storage with firmware 1.21 and earlier, where enabling the Remote Link3 function allows an unauthenticated remote attacker to execute arbitrary OS commands due to improper neutralization of OS command elements. Documented imp...

PT-2025-21272 · I O Data · I-O Data Hdl-T Series

Name of the Vulnerable Software and Affected Versions: I-O DATA HDL-T Series versions 1.21 and earlier Description: The issue is related to a lack of authentication for critical functions in the firmware. This could allow a remote unauthenticated attacker to modify the product's configuration...

I-O Data HDL-T Access Control Vulnerability

I-O Data HDL-T is a series of network hard disks from I-O Data Japan. An access control error vulnerability exists in I-O Data HDL-T version 1.21 and earlier, which stems from a lack of authentication for critical functions and could result in changes to product settings...

CVE-2025-32738: Missing Authentication for Critical Function

Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier. If exploited, a remote unauthenticated attacker may change the product settings...

Security Bulletin: IBM i is vulnerable to a machine-in-the-middle attack due to mishandling error codes when verifying the host key by OpenSSH. [CVE-2025-26465]

Summary OpenSSH used by IBM i is vulnerable to a machine-in-the-middle attack due to mishandling error codes when verifying the host key as described in the vulnerability details section. This bulletin identifies the steps to take to address the vulnerability as described in the remediation/fixes...

IBM i Trust Management Issues Vulnerabilities

IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. IBM i is vulnerable to a trust management issue vulnerability that stems from improper handling of IBM i Netserver authentication, no details of the vulnerability are...

PT-2025-21217 · I O Data · I-O Data Hdl-T Series

Name of the Vulnerable Software and Affected Versions: I-O DATA HDL-T Series firmware versions 1.21 and earlier Description: The issue is related to the improper neutralization of special elements used in an OS command, also known as 'OS Command Injection'. This problem exists in the I-O DATA...

kernel: ext4: fix i_data_sem unlock order in ext4_ind_migrate()

A flaw was found in the kernel's ext4 filesystem. When an EXT4IOCMIGRATE ioctl input/output control operation, requiring synchronous updates, races with a write2 system call, it can lead to a deadlock. This deadlock occurs specifically when the CONFIGPROVELOCKING option is enabled, potentially...

kernel: spi: nxp-fspi: fix the KASAN report out-of-bounds bug

A flaw was found in the Linux kernel. An out-of-bounds write vulnerability exists in the nxp-fspi driver when handling data that is not 4-byte aligned during write operations to the TX FIFO. A local attacker with administrative privileges could exploit this flaw, potentially leading to a system...

CVE-2025-20047: Improper Locking

Improper locking in the IntelR Integrated Connectivity I/O interface CNVi for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access...