Potential Impact: Arbitrary code execution
Severity: High
Scope of Impact: Motorola-specific
CVE Identifier: CVE-2022-34885
Summary Description:
An improper input sanitization vulnerability in the Motorola MR2600 router could allow a local user with elevated permissions to execute arbitrary code.
Mitigation Strategy for Customers (what you should do to protect yourself):
Motorola recommends updating the Motorola MR2600 router to software version 1.0.22 .
Product |
Affected Version |
Update Download Link |
MR2600 |
All versions prior to 1.0.22 |
https://help.motorolanetwork.com/kb/mr2600/mr2600-software-updates#previous-software-updates |
Acknowledgement:
Motorola thanks Jiaqian Peng from Institute of Information Engineering, Chinese Academy of Science for reporting this vulnerability.
References:
https://help.motorolanetwork.com/kb/mr2600/mr2600-software-updates
Revision History:
Revision |
Date |
Description |
1 |
2022-08-17 |
Initial release |