CVE-2024-52564

Summary

Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier. A remote attacker may disable the firewall function of the affected products. As a result, an arbitrary OS command may be executed and/or configuration settings of the device may be altered.

Affected Software

VendorProductVersion RangeStatus
I-O DATA DEVICE, INC.UD-LT1firmware Ver.2.1.8 and earlieraffected
I-O DATA DEVICE, INC.UD-LT1/EXfirmware Ver.2.1.8 and earlieraffected

Weaknesses

  • CWE-1242: Inclusion of undocumented features or chicken bits

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References