Undocumented Features and Chicken Bits Vulnerability Affects Firewall Function

CVE-2024-52564

What is CVE-2024-52564?

A significant security vulnerability exists in the firmware of I-O DATA's UD-LT1 and UD-LT1/EX products. This issue is characterized by the inclusion of undocumented features, commonly referred to as 'chicken bits'. In versions 2.1.8 and earlier, a remote attacker can exploit this vulnerability to disable the firewall functionality, potentially leading to unauthorized OS command execution or alterations to the device's configuration settings. Proper safeguards should be implemented to mitigate the risks associated with this vulnerability.

References