CVE-2024-52564

CVE-2024-52564 is a confirmed zero-day. I-O Data and JPCERT/CC disclosed active exploitation in the wild at the time of public disclosure on December 5, 2024 — before a full patch set was available. The vendor confirmed receiving reports from customers whose devices had been compromised without authorization. What makes this CVE analytically distinctive is its root cause: an undocumented feature (CWE-1242), commonly referred to as a firmware backdoor, that bypasses authentication entirely to allow remote firewall deactivation and OS command execution.