Hidden Functionality Issue in WN-7D36QR Routers by I-O DATA
CVE-2025-55075

6.9MEDIUM

Key Information:

Vendor

I-o Data Device, Inc.

Status
Wn-7d36qr
Wn-7d36qr/ue
Vendor
CVE Published:
17 September 2025

What is CVE-2025-55075?

I-O DATA's WN-7D36QR and WN-7D36QR/UE routers contain a hidden functionality issue that can be exploited by a remote authenticated attacker. Successful exploitation may result in unauthorized enabling of SSH, potentially compromising system security and allowing remote access without proper authorization.

Affected Version(s)

WN-7D36QR firmware Ver.1.1.3 and prior versions

WN-7D36QR/UE firmware Ver.1.1.3 and prior versions

References

https://www.iodata.jp/support/information/2025/09_wn-7d36...
https://jvn.jp/en/vu/JVNVU97490987/

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-55075 : Hidden Functionality Issue in WN-7D36QR Routers by I-O DATA