Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-45841 EUVD-2024-41570GHSA-wfqf-8h9w-jx73

Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.…

Published Dec 5, 2024 · Updated Dec 18, 2024 · Assigned by jpcert

Description

Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier. If an attacker with the guest account of the affected products accesses a specific file, the information containing credentials may be obtained.

Affected products

VendorProductAffectedFixed
I-O DATA DEVICE UD-LT1 firmware Ver.2.1.9 and earlier —
I-O DATA DEVICE UD-LT1/EX firmware Ver.2.1.9 and earlier —

References