Most recent entries from all

bdu:2024-11131

EUVD-2026-207325

fkie_cve-2024-45841

Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier. If an attacker with the guest account of the affected products accesses a specific file, the information containing credentials may be obtained.

GHSA-wfqf-8h9w-jx73

Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier. If an attacker with the guest account of the affected products accesses a specific file, the information containing credentials may be obtained.

jvndb-2024-000125

UD-LT1 and UD-LT1/EX provided by I-O DATA DEVICE, INC. contain multiple vulnerabilities listed below. <ul><li>Incorrect Permission Assignment for Critical Resource (CWE-732) - CVE-2024-45841</li><li>OS Command Injection (CWE-78) - CVE-2024-47133</li><li>Inclusion of Undocumented Features (CWE-1242) - CVE-2024-52564</li></ul> The developer states that attacks exploiting these vulnerabilities have been observed. CVE-2024-45841, CVE-2024-47133 Takeshi Kuramori, Kaori Takashima, and Kohei Masumi of National Institute of Information and Communications Technology, Cybersecurity Research Institute reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-52564 Chuya Hayakawa and Ryo Kamino of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.