OS Command Injection Vulnerability in UD-LT2 Firmware by I-O DATA

CVE-2025-23237

What is CVE-2025-23237?

An OS Command Injection vulnerability exists in the UD-LT2 firmware version 1.00.008_SE and earlier, where improper neutralization of special elements used in an operating system command could allow a logged-in user to execute arbitrary OS commands via the command-line interface (CLI). This vulnerability poses significant risks to the integrity and security of the device, potentially compromising system functionality and data protection.

References