CVE-2022-3086

HIGH

Cradlepoint IBR600 NCOS <6.5.0.160bc2e - Command Injection

Title source: llm

Description

Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacker to execute arbitrary code.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource

https://www.cisa.gov/uscert/ics/advisories/icsa-22-321-02

Scores

CVSS v3 7.1

EPSS 0.0012

EPSS Percentile 30.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-77

Status published

Products (50)

moxa/uc-2101-lx_firmware 1.3 - 1.5

moxa/uc-2102-lx_firmware 1.3 - 1.5

moxa/uc-2104-lx_firmware 1.3 - 1.5

moxa/uc-2111-lx_firmware 1.3 - 1.5

moxa/uc-2112-lx_firmware 1.3 - 1.5

moxa/uc-2114-t-lx_firmware 1.3 - 1.5

moxa/uc-2116-t-lx_firmware 1.3 - 1.5

moxa/uc-3101-t-ap-lx_firmware 1.2 - 2.0

moxa/uc-3101-t-eu-lx_firmware 1.2 - 2.0

moxa/uc-3101-t-us-lx_firmware 1.2 - 2.0

... and 40 more

Published Dec 02, 2022

Tracked Since Feb 18, 2026