CVE-2024-23618

9.8 criticalEPSS 1.2%

Critical (9.8) in commscope arris surfboard sbg6950ac2 firmware. EPSS 1.2% chance of exploitation in the next 30 days.

An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2024-01-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

commscope:arris_surfboard_sbg6950ac2_firmware

References

https://blog.exodusintel.com/2024/01/25/arris-surfboard-sbg6950ac2-arbitrary-command-execution-vulnerability/
https://blog.exodusintel.com/2024/01/25/arris-surfboard-sbg6950ac2-arbitrary-command-execution-vulnerability/

Check your stack JSON