github.com
https://github.com/N1nEmAn/wp/blob/main/m0tOrol%40-Cx2l.pdf CVE-2024-45880
HIGH
Record summary
CVE-2024-45880 has a selected CVSS score of 8.0 (high).
Description
A command injection vulnerability exists in Motorola CX2L router v1.0.2 and below. The vulnerability is present in the SetStationSettings function. The system directly invokes the system function to execute commands for setting parameters such as MAC address without proper input filtering. This allows malicious users to inject and execute arbitrary commands.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 8, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
cx2l_firmwareBrowse motorola / cx2l_firmwareDefault status: unknown | CVE List | Through 1.0.2 | affected |
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-45880