by Kastro
Paper/Archive/CVE-2024-23629

CVE-2024-23629

Motorola MR2600 — Motorola MR2600 Authentication Bypass Vulnerability

EPSS 1%CVSS 9.6
critical.is priorityof 100
42
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 65.2.652 × 2013.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An authentication bypass vulnerability exists in the web component of the Motorola MR2600. An attacker can exploit this vulnerability to access protected URLs and retrieve sensitive information.

Affected

ProductAffectedFixed inSource
MR26001.0.7–CNA
mr26001.0.7–CISA-ADP

Scores by source

XI (CNA)9.6CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeupblog.exodusintel.com/2024/01/25/motorola-mr2600-authentication-bypass-vulnerability