Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC. allow authenticated attackers to execute arbitrary OS commands via unspecified vectors.
https://jvn.jp/en/jp/JVN36048131/index.html
http://www.iodata.jp/support/information/2018/magicalfinder/