CVE-2024-45841

CVSS 6.5 MEDIUMEPSS 0.5%CWE-732

Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier. If an attacker with the guest account of the affected products accesses a specific file, the information containing credentials may be obtained.

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Productos afectados

I-O DATA DEVICE, INC. · UD-LT1 I-O DATA DEVICE, INC. · UD-LT1/EX

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://jvn.jp/en/jp/JVN46615026/https://www.iodata.jp/support/information/2024/11_ud-lt1/