Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. A remote attacker may disable the LAN-side firewall function of the affected products, and open specific ports.

Metrics

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://jvn.jp/en/jp/JVN15293958/ cve-icon cve-icon
https://www.iodata.jp/support/information/2025/01_ud-lt2/ cve-icon cve-icon
History

Wed, 12 Feb 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 22 Jan 2025 06:00:00 +0000

Type Values Removed Values Added
Description Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. A remote attacker may disable the LAN-side firewall function of the affected products, and open specific ports.
Weaknesses CWE-1242
References
Metrics cvssV3_0

{'score': 7.5, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: jpcert

Published: 2025-01-22T05:49:13.793Z

Updated: 2025-02-12T20:41:22.761Z

Reserved: 2025-01-16T07:05:53.738Z

Link: CVE-2025-22450

cve-icon Vulnrichment

Updated: 2025-02-12T20:33:24.181Z

cve-icon NVD

Status : Received

Published: 2025-01-22T06:15:14.327

Modified: 2025-01-22T06:15:14.327

Link: CVE-2025-22450

cve-icon Redhat

No data.