CVE-2024-23618

Опубликовано: 26 янв. 2024

Источник: nvd

CVSS3: 9.6

CVSS3: 9.8

CVSS2: 8.3

EPSS Низкий

Описание

An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root.

Ссылки

https://blog.exodusintel.com/2024/01/25/arris-surfboard-sbg6950ac2-arbitrary-command-execution-vulnerability/
Third Party Advisory
https://blog.exodusintel.com/2024/01/25/arris-surfboard-sbg6950ac2-arbitrary-command-execution-vulnerability/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:commscope:arris_surfboard_sbg6950ac2_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:commscope:arris_surfboard_sbg6950ac2:-:*:*:*:*:*:*:*

EPSS

Процентиль: 51%

0.00274

Низкий

9.6 Critical

CVSS3

9.8 Critical

CVSS3

8.3 High

CVSS2

Дефекты

CWE-306

Связанные уязвимости

GHSA-r47x-9r32-fvp4

CVSS3: 9.6

github

около 2 лет назад

An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root.

EPSS

Процентиль: 51%

0.00274

Низкий

9.6 Critical

CVSS3

9.8 Critical

CVSS3

8.3 High

CVSS2

Дефекты

CWE-306