CVEvulnerability

CVE-2022-3086

7.6 HIGH Published 2022-12-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-12-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 ([email protected])
7.6 HIGH — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-77

Description

Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacker to execute arbitrary code.

Affected configurations

• moxa uc-8580-t-lx firmware 1.1 • moxa uc-8580-t-ct-lx firmware 1.1 • moxa uc-8580-t-q-lx firmware 1.1 • moxa uc-8580-t-ct-q-lx firmware 1.1 • moxa uc-8580-q-lx firmware 1.1 • moxa uc-8580-lx firmware 1.1 • moxa uc-8540-lx firmware (>= 1.0 <= 1.2) • moxa uc-8540-t-ct-lx firmware (>= 1.0 <= 1.2) • moxa uc-8540-t-lx firmware (>= 1.0 <= 1.2) • moxa uc-8410a-lx firmware 2.2 • moxa uc-8410a-nw-lx firmware 2.2 • moxa uc-8410a-nw-t-lx firmware 2.2 • moxa uc-8410a-t-lx firmware 2.2 • moxa uc-8210-t-lx-s firmware (>= 1.0 <= 2.4) • moxa uc-8220-t-lx firmware (>= 1.0 <= 2.4) • moxa uc-8220-t-lx-us-s firmware (>= 1.0 <= 2.4) • moxa uc-8220-t-lx-eu-s firmware (>= 1.0 <= 2.4) • moxa uc-8220-t-lx-ap-s firmware (>= 1.0 <= 2.4) • moxa uc-8112a-me-t-lx firmware 1.0 • moxa uc-8112a-me-t-lx firmware 1.1 • moxa uc-8131-lx firmware 1.2 • moxa uc-8131-lx firmware 1.3 • moxa uc-8132-lx firmware 1.2 • moxa uc-8132-lx firmware 1.3 • moxa uc-8162-lx firmware 1.2 • moxa uc-8162-lx firmware 1.3 • moxa uc-8112-lx firmware 1.2 • moxa uc-8112-lx firmware 1.3 • moxa uc-5101-lx firmware 1.2 • moxa uc-5101-t-lx firmware 1.2 • moxa uc-5102-lx firmware 1.2 • moxa uc-5102-t-lx firmware 1.2 • moxa uc-5111-lx firmware 1.2 • moxa uc-5111-t-lx firmware 1.2 • moxa uc-5112-lx firmware 1.2 • moxa uc-5112-t-lx firmware 1.2 • moxa uc-3101-t-ap-lx firmware (>= 1.2 <= 2.0) • moxa uc-3101-t-eu-lx firmware (>= 1.2 <= 2.0) • moxa uc-3101-t-us-lx firmware (>= 1.2 <= 2.0) • moxa uc-3111-t-ap-lx firmware (>= 1.2 <= 2.0) • moxa uc-3111-t-ap-lx-nw firmware (>= 1.2 <= 2.0) • moxa uc-3111-t-eu-lx firmware (>= 1.2 <= 2.0) • moxa uc-3111-t-eu-lx-nw firmware (>= 1.2 <= 2.0) • moxa uc-3111-t-us-lx firmware (>= 1.2 <= 2.0) • moxa uc-3111-t-us-lx-nw firmware (>= 1.2 <= 2.0) • moxa uc-3121-t-ap-lx firmware (>= 1.2 <= 2.0) • moxa uc-3121-t-eu-lx firmware (>= 1.2 <= 2.0) • moxa uc-3121-t-us-lx firmware (>= 1.2 <= 2.0) • moxa uc-2101-lx firmware (>= 1.3 <= 1.5) • moxa uc-2102-lx firmware (>= 1.3 <= 1.5) • moxa uc-2104-lx firmware (>= 1.3 <= 1.5) • moxa uc-2111-lx firmware (>= 1.3 <= 1.5) • moxa uc-2112-lx firmware (>= 1.3 <= 1.5) • moxa uc-2114-t-lx firmware (>= 1.3 <= 1.5) • moxa uc-2116-t-lx firmware (>= 1.3 <= 1.5)

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References