I-O Data UD-LT2 OS Command Injection Vulnerability
Vulnerability
An OS command injection vulnerability has been identified in I-O Data UD-LT2 routers, specifically in the firmware version 1.00.008_SE and earlier. This vulnerability allows an attacker with administrative access to execute arbitrary OS commands by manipulating requests related to certain screen operations.
Impact
Exploitation of this vulnerability allows for arbitrary OS command execution on the affected device.
Remediation
Users are advised to update the router's firmware to version 1.00.011_SE, which addresses this vulnerability.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
4.8remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.