Motorola MR2600 SaveStaticRouteIPv6Params Command Injection Vulnerability

CVE-2024-23628

Summary

A command injection vulnerability has been identified in the 'SaveStaticRouteIPv6Params' parameter of the Motorola MR2600 router. This flaw allows remote attackers to potentially execute arbitrary commands on the device. Although the vulnerability requires authentication, it can be bypassed, making the router susceptible to exploitation. Users of the Motorola MR2600 should be aware of this vulnerability and consider implementing security measures to mitigate any risk of unauthorized access and command execution.

References