Authentication Bypass in I-O DATA Network Attached Hard Disk HDL-T Series

CVE-2025-32738

What is CVE-2025-32738?

A security vulnerability has been identified in the firmware of I-O DATA's HDL-T Series network-attached hard disk. Specifically, versions 1.21 and earlier are affected by a missing authentication issue, which could allow remote unauthenticated attackers to modify critical product settings. This flaw poses a substantial risk as it enables unauthorized changes that could compromise the integrity and security of the device and its stored data.

References