Arris SURFboard SBG6950AC2 Arbitrary Code Execution Vulnerability
CVE-2024-23618

9.6CRITICAL

Key Information:

Vendor

Arris

Status
Surfboard Sbg6950ac2
Vendor
CVE Published:
26 January 2024

What is CVE-2024-23618?

An arbitrary code execution vulnerability in the Arris SURFboard SGB6950AC2 allows attackers to execute code with root privileges without any authentication. This significant security issue poses severe risks for users, as it can lead to unauthorized control over the device and compromise the entire network. Proper action should be taken to mitigate potential exploits and secure the affected devices.

Affected Version(s)

SURFboard SBG6950AC2 9.1.103aa23

References

https://blog.exodusintel.com/2024/01/25/arris-surfboard-s...
third-party-advisory

CVSS V3.1

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Exodus Intelligence
.