Potential Impact: Arbitrary code execution
Severity: High
Scope of Impact: Motorola-specific
CVE Identifier: CVE-2022-34885
Summary Description:
An improper input sanitization vulnerability in the Motorola MR2600 router could allow a local user with elevated permissions to execute arbitrary code.
Mitigation Strategy for Customers (what you should do to protect yourself):
Motorola recommends updating the Motorola MR2600 router to software version 1.0.18.
|
Product |
Affected Version |
Update Download Link |
|
MR2600 |
All versions prior to 1.0.18 |
https://help.motorolanetwork.com/hc/en-us/articles/6510843765403-MR2600-Software-Updates |
Acknowledgement:
Motorola thanks Jiaqian Peng from Institute of Information Engineering, Chinese Academy of Science for reporting this vulnerability.
References:
https://help.motorolanetwork.com/hc/en-us/articles/6510843765403-MR2600-Software-Updates
Revision History:
|
Revision |
Date |
Description |
|
1 |
2022-08-17 |
Initial release |