CVE-2023-29805: Iodata Wfs-SR03K Firmware

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the pro_stor_canceltrans_handler_part_19 function.

Affected products

• Iodata Wfs-SR03K Firmware: version 1.03 only
• Iodata Wfs-SR03W Firmware: version 1.03 only

Published 2023-04-14. Last modified 2026-06-17.