CVE-2024-52564

State
Published
Severity
7.5 High
Published
Dec 5, 2024
Updated
Jan 29, 2025
Reserved
Nov 14, 2024

Read the record on cve.org

Description

Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier. A remote attacker may disable the firewall function of the affected products. As a result, an arbitrary OS command may be executed and/or configuration settings of the device may be altered.

Scores

CVSSScoreVectorSource
3.07.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Njpcert

Weaknesses

  • CWE-1242 Inclusion of undocumented features or chicken bits

Affected Products

ProductVersions
UD-LT1I-O DATA DEVICE, INC.
  • firmware Ver.2.1.8 and earlierAffected
UD-LT1/EXI-O DATA DEVICE, INC.
  • firmware Ver.2.1.8 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.