CVE-2024-45841

Name of the Vulnerable Software and Affected Versions: UD-LT1 firmware versions 2.1.9 and earlier UD-LT1/EX firmware versions 2.1.9 and earlier

Description: The issue is related to incorrect permission assignment for a critical resource in the firmware of I-O Data Device UD-LT1 and UD-LT1/EX. This could allow an attacker with a guest account to access a specific file and obtain information containing credentials. The vulnerability may be exploited remotely.

Recommendations: For UD-LT1 firmware versions 2.1.9 and earlier, update to a version that fixes the incorrect permission assignment issue. For UD-LT1/EX firmware versions 2.1.9 and earlier, update to a version that fixes the incorrect permission assignment issue. As a temporary workaround, consider restricting access to the specific file that contains credentials to minimize the risk of exploitation.