Required CVE Record Information
Description
A command injection vulnerability exists in the 'SaveStaticRouteIPv6Params' parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability to achieve command execution. Authentication is required, however can be bypassed.
CWE 1 Total
CVSS 2 Total
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.0 | CRITICAL | 3.1 | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
| 7.7 | — | 2.0 | AV:A/AC:L/Au:S/C:C/I:C/A:C |
Credits
- Exodus Intelligence finder
References 1 Total
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 1 Total
- https://blog.exodusintel.com/2024/01/25/motorola-mr2600-savestaticrouteipv6params-command-injection-vulnerability/ third-party-advisoryx_transferred