Remote code execution vulnerability in UD-LT1 firmware
CVE-2024-47133

7.2HIGH

Key Information:

Vendor

I-o Data Device, Inc.

Status
Ud-lt1
Ud-lt1/ex
Vendor
CVE Published:
5 December 2024

What is CVE-2024-47133?

The I-O Data UD-LT1 and UD-LT1/EX firmware versions 2.1.9 and earlier contain a security vulnerability that permits a remote attacker with an administrative account to execute arbitrary operating system commands. This flaw poses significant risks, enabling potential exploitation that could compromise system integrity and data security.

Affected Version(s)

UD-LT1 firmware Ver.2.1.8 and earlier

UD-LT1/EX firmware Ver.2.1.8 and earlier

References

https://www.iodata.jp/support/information/2024/11_ud-lt1/
https://jvn.jp/en/jp/JVN46615026/

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-47133 : Remote code execution vulnerability in UD-LT1 firmware