Permission Assignment Vulnerability in UD-LT1 Firmware by I-O DATA

CVE-2024-45841

What is CVE-2024-45841?

A significant security vulnerability has been identified in the UD-LT1 and UD-LT1/EX firmware versions 2.1.9 and earlier. This issue arises from incorrect permission assignment for critical resources, which can be exploited by an attacker with a guest account. By accessing a specific file, the attacker may obtain sensitive information, including credentials, thereby jeopardizing the security of the affected systems. Users are advised to review their firmware versions and apply necessary updates to mitigate potential risks. For further information, please refer to the official support page and the Japanese Vulnerability Notes.

References