CVE-2022-3086 — Cradlepoint IBR600 Command Injection

CVE-2022-3086

Cradlepoint IBR600 Command Injection PUBLISHED

Description (CNA)

Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacker to execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
Cradlepoint / IBR600	affected 0 through 6.5.0.160bc2e

CWE

CWE-77

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-321-02

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-321-02

CISA-ADP

No English description supplied.

No references supplied.