Today > | 9 High | 16 Medium vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-52564

Dec. 5, 2024, 10:31 a.m.

Tags

vultures@jpcert.or.jp
CWE-1242
2024-12-05
CVE-2024-52564

CVSS Score

7.5 / 10

Product(s) Impacted

UD-LT1 firmware

  • 2.1.8 and earlier

UD-LT1/EX firmware

  • 2.1.8 and earlier

Description

Inclusion of undocumented features or chicken bits issue exists in UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier. A remote attacker may disable the firewall function of the affected products. As a result, an arbitrary OS command may be executed and/or configuration settings of the device may be altered.

Weaknesses

CWE-1242
Inclusion of Undocumented Features or Chicken Bits

The device includes chicken bits or undocumented features that can create entry points for unauthorized actors.

CWE ID: 1242

Date

Published: Dec. 5, 2024, 10:31 a.m.

Last Modified: Dec. 5, 2024, 10:31 a.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

vultures@jpcert.or.jp

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

Base Score
7.5
Exploitability Score
3.9
Impact Score
3.6
Base Severity
HIGH
CVSS Vector String

The CVSS vector string provides an in-depth view of the vulnerability metrics.

View Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

References

https://jvn.jp/ vultures@jpcert.or.jp
https://www.iodata.jp/ vultures@jpcert.or.jp