CVE-2024-52564

HIGH

UD-LT1 and UD-LT1/EX Firmware Arbitrary OS Command Execution

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2024-52564 has a selected CVSS score of 7.5 (high).

Description

Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier. A remote attacker may disable the firewall function of the affected products. As a result, an arbitrary OS command may be executed and/or configuration settings of the device may be altered.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Dec 4, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 6, 2024 · Source: CVE List

Affected products and versions

5
ProductSourceVersion range

UD-LT1 and UD-LT1/EX

Browse I-O DATA DEVICE, INC / UD-LT1 and UD-LT1/EX
VulnCheckVersion data not supplied

UD-LT1

Browse I-O DATA DEVICE, INC. / UD-LT1
CVE Listfirmware Ver.2.1.8 and earlieraffected

UD-LT1/EX

Browse I-O DATA DEVICE, INC. / UD-LT1/EX
CVE Listfirmware Ver.2.1.8 and earlieraffected

ud-lt1\/ex_firmware

Browse iodata / ud-lt1\/ex_firmware

Default status: unknown

CVE ListThrough 2.1.8affected

ud-lt1_firmware

Browse iodata / ud-lt1_firmware

Default status: unknown

CVE ListThrough 2.1.8affected

References

3