UD-LT2 vulnerabilities

3 known vulnerabilities in UD-LT2 from I-O DATA DEVICE. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  UD-LT2: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-26856Feb 20, 2025I-O DATA DEVICEEPSS 1.12%

  Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. If an attacker logs in to the affected product with an administrative account and manipulates requests for a

• 7.5 High severity

  UD-LT2: Inclusion of Undocumented Features or Chicken Bits

  CVE-2025-22450Jan 22, 2025I-O DATA DEVICE

  Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. A remote attacker may disable the LAN-side firewall function of the affected products, and open specific ports.

• 7.2 High severity

  UD-LT2: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-20617Jan 22, 2025I-O DATA DEVICEEPSS 1.17%

  Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. If an attacker logs in to the affected product with an administrative account and manipulates requests for a