CVE-2023-29804: Iodata Wfs-SR03K Firmware

High severity, CVSS 8.8. EPSS: 17.5% chance of exploitation in the next 30 days.

WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the sys_smb_pwdmod function.

Affected products

• Iodata Wfs-SR03K Firmware: version 1.03 only
• Iodata Wfs-SR03W Firmware: version 1.03 only

Published 2023-04-14. Last modified 2026-06-17.