PT-2025-4491 · Ud-Lt2 · Ud-Lt2

Kaori Takashima + 2 · Published 2025-01-22 · Updated 2025-01-22 · CVE-2025-22450

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions UD-LT2 firmware versions 1.00.008 SE and earlier

Description The issue exists due to the inclusion of undocumented features, allowing a remote attacker to disable the LAN-side firewall function of the affected products and open specific ports.

Recommendations For UD-LT2 firmware versions 1.00.008 SE and earlier, consider disabling the undocumented features until a patch is available. As a temporary workaround, restrict access to the LAN-side firewall function to minimize the risk of exploitation. Avoid using the affected firmware until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1242

Related Identifiers

CVE-2025-22450

Affected Products

Ud-Lt2

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-22450 · Security Note
• https://jvn.jp/en/jp/JVN15293958 · Note
• https://t.me/cvenotify/108183 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1882064291093762455 · Twitter Post
• https://twitter.com/CVEnew/status/1881949696425382147 · Twitter Post
• https://t.me/cvedetector/16075 · Telegram Post
• https://iodata.jp/support/information/2025/01_ud-lt2 · Note