Improper neutralization of special elements used in an OS command...
Vulnerability Description
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. If an attacker logs in to the affected product with an administrative account and manipulates requests for a certain screen operation, an arbitrary OS command may be executed. This vulnerability was reported on a different screen operation from CVE-2025-26856.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-20617
Credits & Attribution
No credits recorded in the NVD database.
References
More from I-O DATA DEVICE, INC.
View All →Affected Vendor
I-O DATA DEVICE, INC.
View all reports →