CVE-2024-52564

Published: Dec 5, 2024Modified: Jun 17, 2026Deferred

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: vultures@jpcert.or.jp (Secondary)

Description

Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier. A remote attacker may disable the firewall function of the affected products. As a result, an arbitrary OS command may be executed and/or configuration settings of the device may be altered.

Related CWEs

CWE-1242

Inclusion of Undocumented Features or Chicken Bits

The device includes chicken bits or undocumented features that can create entry points for unauthorized actors.

References (2)

https://jvn.jp/en/jp/JVN46615026/

Source: vultures@jpcert.or.jp

https://www.iodata.jp/support/information/2024/11_ud-lt1/

Source: vultures@jpcert.or.jp

Timeline

No history available yet.