PT-2023-13505 · Mr2600 · Mr2600

Published 2023-10-27 · Updated 2023-11-07 · CVE-2022-3681

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MR2600 router versions 1.0.18 and earlier

Description A vulnerability has been identified that could allow an attacker within range of the wireless network to successfully brute force the WPS pin, potentially allowing them unauthorized access to a wireless network.

Recommendations For MR2600 router versions 1.0.18 and earlier, consider disabling the WPS feature as a temporary workaround until a patch is available. Restrict access to the wireless network to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2022-3681

Affected Products

Mr2600

References · 5

• https://web.archive.org/web/20230317174952/https://help.motorolanetwork.com/hc/en-us/articles/9933302506523 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3681 · Security Note
• https://osv.dev/vulnerability/CVE-2022-3681 · Vendor Advisory
• https://twitter.com/CVEnew/status/1717989020041658634 · Twitter Post
• https://twitter.com/DMFezzaReedCISA/status/1718029449734541469 · Twitter Post