CVE-2024-52564

CVSS 3.0 Score 7.5 of 10 (high)

Details

Published Dec 5, 2024

CWE ID 1242

Summary

CVE-2024-52564 is a newly disclosed vulnerability affecting UD-LT1 firmware version 2.1.8 and earlier, as well as UD-LT1/EX firmware version 2.1.8 and earlier. This issue involves undocumented features or "chicken bits," allowing a remote attacker to manipulate the firewall function. Successful exploitation could result in the execution of arbitrary OS commands or configuration changes on the affected product. This vulnerability poses a significant risk, and affected users are urged to apply the necessary patches as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

UD-LT1/EX

Affected Vendors

VULNERA, Inc.

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/0hOxbe
https://www.cve.org/CVERecord?id=CVE-2024-52564
https://nvd.nist.gov/vuln/detail/CVE-2024-52564

Back to Vulnerability Database