Skip to content
Sign in
7.2 High

CVE-2026-27564 A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by…

Description

A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing execution of commands with root privileges on the device.

Affected products and versions

Product Affected versions Fixed in
ICE2-8IOL1-G65L-V1D 1.0 1.0.0 → < 1.7.4 1.7.4
ICE2-8IOL-G65L-V1D 1.0 1.0.0 → < 1.7.4 1.7.4
ICE2-8IOL-K45P-RJ45 1.0 1.0.0 → < 1.7.4 1.7.4
ICE2-8IOL-K45S-RJ45 1.0 1.0.0 → < 1.7.4 1.7.4
ICE3-8IOL1-G65L-V1D 1.0 1.0.0 → < 1.7.4 1.7.4
ICE3-8IOL-G65L-V1D 1.0 1.0.0 → < 1.7.4 1.7.4
ICE3-8IOL-G65L-V1D-Y 1.0 1.0.0 → < 1.7.4 1.7.4
ICE3-8IOL-K45P-RJ45 1.0 1.0.0 → < 1.7.4 1.7.4
ICE3-8IOL-K45S-RJ45 1.0 1.0.0 → < 1.7.4 1.7.4
Show the 6 other branches
Product Affected versions Fixed in
IOL MA8 PN DI8 1.0 1.0.0 → < 1.7.4 1.7.4
IOL MA8 EIP DI8 1.0 1.0.0 → < 1.7.4 1.7.4
YL212CEI8M1IO 1.0 1.0.0 → < 1.7.4 1.7.4
YN115CEI8RPIO 1.0 1.0.0 → < 1.7.4 1.7.4
YL212CPN8M1IO 1.0 1.0.0 → < 1.7.4 1.7.4
YN115CPN8RPIO 1.0 1.0.0 → < 1.7.4 1.7.4

Other CVEs of ICE2-8IOL1-G65L-V1D

The 20 CVEs of ICE2-8IOL1-G65L-V1D →
CVE-2026-27565 An unauthenticated remote attacker can upload a malicious IODD file that places and executes a shell script with root… 9.8 Critical CVE-2026-27563 A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by… 7.2 High CVE-2026-27562 A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by… 7.2 High CVE-2026-27561 A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by… 7.2 High
Track this CVE