CVE-2017-2280

CVE-2017-2280 describes a critical vulnerability in I-O Data WN-AX1167GR firmware version 3.00 and earlier, stemming from the use of hardcoded credentials. This flaw allows an unauthenticated attacker with network access to the device to execute arbitrary code, leading to complete compromise. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over the network with low attack complexity, posing a significant risk of high confidentiality, integrity, and availability impact. While no public exploits or active exploitation have been identified, and community discussion is minimal, the inherent ease of exploitation makes it a notable concern.