CVE-2024-47133: UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier allow a remote authenticated attacker with an administrative...

7.2 CVSS

Description

UD-LT1 firmware Ver.2.1.8 and earlier and UD-LT1/EX firmware Ver.2.1.8 and earlier allow a remote authenticated attacker with an administrative account to execute arbitrary OS commands.

Classification

CVE ID: CVE-2024-47133

CVSS Base Severity: HIGH

CVSS Base Score: 7.2

Affected Products

Vendor: I-O DATA DEVICE, INC.

Product: UD-LT1

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 11.77% (scored less or equal to compared to others)

EPSS Date: 2025-02-04 (when was this score calculated)

References

https://www.iodata.jp/support/information/2024/11_ud-lt1/
https://jvn.jp/en/jp/JVN46615026/

Timeline