by Kastro
Paper/Archive/CVE-2024-23630

CVE-2024-23630

Motorola MR2600 — Motorola MR2600 Arbitrary Firmware Upload Vulnerability

EPSS 2%CVSS 9.0
critical.is priorityof 100
42
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 74.6.746 × 2014.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An arbitrary firmware upload vulnerability exists in the Motorola MR2600. An attacker can exploit this vulnerability to achieve code execution on the device. Authentication is required, however can be bypassed.

Affected

ProductAffectedFixed inSource
MR26001.0.7–CNA

Scores by source

XI (CNA)9.0CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

writeupblog.exodusintel.com/2024/01/25/motorola-mr2600-arbitrary-firmware-upload-vulnerability