Motorola MR2600 SaveStaticRouteIPv4Params Command Injection Vulnerability

CVE-2024-23627

Summary

A command injection vulnerability has been identified in the 'SaveStaticRouteIPv4Params' parameter of the Motorola MR2600 router. This vulnerability allows a remote attacker to execute arbitrary commands on the device. Although authentication is generally required, it can be bypassed, potentially putting numerous configurations and sensitive data at risk. Proper network security practices should be followed to mitigate any possible exploitation of this vulnerability.

References