CVE-2024-23627

8.8 highEPSS 3.5%

High (8.8) in motorola mr2600 firmware. EPSS 3.5% chance of exploitation in the next 30 days.

A command injection vulnerability exists in the 'SaveStaticRouteIPv4Params' parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability to achieve command execution. Authentication is required, however can be bypassed.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.5% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2024-01-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

motorola:mr2600_firmware

References

https://blog.exodusintel.com/2024/01/25/motorola-mr2600-savestaticrouteipv4params-command-injection-vulnerability/
https://blog.exodusintel.com/2024/01/25/motorola-mr2600-savestaticrouteipv4params-command-injection-vulnerability/

Check your stack JSON