What’s Vulnerable › Vulnerabilities

CVE-2024-45841

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-05 · updated 2026-06-17
• Weakness: CWE-732

Description

Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier. If an attacker with the guest account of the affected products accesses a specific file, the information containing credentials may be obtained.

Affected products

• I-O DATA DEVICE, INC. UD-LT1: through firmware Ver.2.1.9
• I-O DATA DEVICE, INC. UD-LT1/EX: through firmware Ver.2.1.9

References

• https://jvn.jp/en/jp/JVN46615026/
• https://www.iodata.jp/support/information/2024/11_ud-lt1/

Get alerted when CVE-2024-45841 or the next vulnerability affects your stack