CVE-2024-23618

CVSS V2 None CVSS V3 None

Description

An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root.

Overview

CVE ID
CVE-2024-23618

Assigner
XI

Vulnerability Status
PUBLISHED

Published Version
2024-01-25T23:35:54.558Z

Last Modified Date
2024-01-25T23:35:54.558Z

Weakness Enumerations

CWE	URL
CWE-306	http://cwe.mitre.org/data/definitions/306.html

References

Reference URL	Reference Tags
https://blog.exodusintel.com/2024/01/25/arris-surfboard-sbg6950ac2-arbitrary-command-execution-vulnerability/	third-party-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-23618
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23618

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 07:19:57				Added to TrackCVE