CVE-2024-45841

CVSS 6.5 MEDIUMEPSS 0.5%CWE-732

Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier. If an attacker with the guest account of the affected products accesses a specific file, the information containing credentials may be obtained.

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Produtos afetados

I-O DATA DEVICE, INC. · UD-LT1 I-O DATA DEVICE, INC. · UD-LT1/EX

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://jvn.jp/en/jp/JVN46615026/https://www.iodata.jp/support/information/2024/11_ud-lt1/