high7.1
CVE-2022-3086
Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain f…
Impact
Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacker to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moxa | Uc-8580-T-Lx Firmware | Version 1.1 |
| Moxa | Uc-8580-T-Ct-Lx Firmware | Version 1.1 |
| Moxa | Uc-8580-T-Q-Lx Firmware | Version 1.1 |
| Moxa | Uc-8580-T-Ct-Q-Lx Firmware | Version 1.1 |
| Moxa | Uc-8580-Q-Lx Firmware | Version 1.1 |
| Moxa | Uc-8580-Lx Firmware | Version 1.1 |
| Moxa | Uc-8540-Lx Firmware | from 1.0 through 1.2 |
| Moxa | Uc-8540-T-Ct-Lx Firmware | from 1.0 through 1.2 |
| Moxa | Uc-8540-T-Lx Firmware | from 1.0 through 1.2 |
| Moxa | Uc-8410a-Lx Firmware | Version 2.2 |
| Moxa | Uc-8410a-Nw-Lx Firmware | Version 2.2 |
| Moxa | Uc-8410a-Nw-T-Lx Firmware | Version 2.2 |