PT-2024-19984 · Motorola · Motorola Mr2600

Exodus Intelligence · Published 2024-01-25 · Updated 2024-02-01 · CVE-2024-23630

Positive Technologies (AI Summary)

CVSS v2.0

7.7

High

Base vector

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Motorola MR2600 (affected versions not specified)

Description An arbitrary firmware upload issue exists, allowing an attacker to achieve code execution on the device. Although authentication is required, it can be bypassed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2024-23630

Affected Products

Motorola Mr2600

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-23630 · Security Note
• https://t.me/cvenotify/69621 · Telegram Post
• https://blog.exodusintel.com/2024/01/25/motorola-mr2600-arbitrary-firmware-upload-vulnerability · Note
• https://twitter.com/VulmonFeeds/status/1750695749879210026 · Twitter Post
• https://twitter.com/CVEnew/status/1750667965291286745 · Twitter Post