CVE-2025-22450

Published: Jan 22, 2025Modified: Jun 17, 2026Deferred

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: vultures@jpcert.or.jp (Secondary)

Description

Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. A remote attacker may disable the LAN-side firewall function of the affected products, and open specific ports.

Related CWEs

CWE-1242

Inclusion of Undocumented Features or Chicken Bits

The device includes chicken bits or undocumented features that can create entry points for unauthorized actors.

References (2)

https://jvn.jp/en/jp/JVN15293958/

Source: vultures@jpcert.or.jp

https://www.iodata.jp/support/information/2025/01_ud-lt2/

Source: vultures@jpcert.or.jp

Timeline

No history available yet.