Zero-Day Vulnerabilities in I-O Data Routers Expose Critical Security Risks

Hackers are exploiting zero-day vulnerabilities in I-O Data router devices, allowing them to change device settings, run unauthorized commands, and even disable firewalls. These vulnerabilities, identified as CVE-2024-45841, CVE-2024-47133, and CVE-2024-52564, affect the UD-LT1, a hybrid LTE router designed for flexible connectivity, as well as its industrial-grade version, the UD-LT1/EX. These flaws pose serious security risks, giving attackers the ability to take over devices, tamper with configurations, and weaken network defenses.