Skip to content
OpenAdvisories
High · 7.1 CVE-2022-3086 EUVD-2022-42515GHSA-g37x-jpmr-w7p9

Cradlepoint IBR600 Command Injection

Published Nov 29, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Description

Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable
to shell escape, which enables local attackers with non-superuser
credentials to gain full, unrestrictive shell access which may allow an
attacker to execute arbitrary code.

Affected products

VendorProductAffectedFixed
Cradlepoint IBR600 ≤ 6.5.0.160bc2e —

Advisories 1

References