VulnerabilityDeferred

CVE-2024-45841

If an attacker with the guest account of the affected products accesses a specific file, the information containing credentials may be obtained.

MEDIUM 6.5EPSS 0.47%

Does this matter?

Lower severity and a low EPSS score (0.47%). Track it; it rarely justifies an emergency change on its own.

Description

Incorrect permission assignment for critical resource issue exists in UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier. If an attacker with the guest account of the affected products accesses a specific file, the information containing credentials may be obtained.

CVSS 3.0: 6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.47% probability · 40th percentile
CISA KEV: Not listed
Weakness: CWE-732
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/jp/JVN46615026/
https://www.iodata.jp/support/information/2024/11_ud-lt1/

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.