CVE-2016-1207: Cross-site scripting (XSS) vulnerability on I-O DATA DEVICE WN-G300R devices with firmware 1.12 and earlier...

Security readout for executives and security teams

This CVE affects legacy I-O DATA WN-G300R series routers. A logged-in remote user could inject script or HTML into the device’s web interface. The sources do not describe active exploitation, a CVSS score, or a specific attack vector. Exposure is likely limited to organizations still using affected I-O DATA WN-G300R, WN-G300R2, or WN-G300R3 devices, especially where the admin interface is reachable by untrusted authenticated users. Treat this as a targeted legacy-device hygiene issue, not an emergency based on current evidence. Prioritize if affected routers manage sensitive networks or expose administration broadly. Mitigation focus: Check I-O DATA advisory for firmware update, replacement, or vendor-supported remediation.; Restrict router administration to trusted management networks only.; Remove unnecessary remote administration access to affected devices..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.