CVE-2024-23618: Arris SURFboard SBG6950AC2 Arbitrary Code Execution Vulnerability
Published Jan 25, 2024
·Updated
An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root.
Affected Software
2 affected components
All of the following
CommScope Arris Surfboard Sbg6950ac2 Firmware
CommScope Arris Surfboard Sbg6950ac2
Event History
Jan 25, 2024
CVE Published
via MITRE·11:35 PM
Data Sourced
via MITRE·11:35 PM
DescriptionSeverityWeakness
Jan 26, 2024
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-23618?
CVE-2024-23618 is classified as a critical severity vulnerability due to the potential for arbitrary code execution as root.
2
How do I fix CVE-2024-23618?
To mitigate CVE-2024-23618, users should update their Arris SURFboard SGB6950AC2 firmware to the latest available version.
3
Who is affected by CVE-2024-23618?
CVE-2024-23618 affects users of Arris SURFboard SGB6950AC2 devices with the vulnerable firmware.
4
What type of vulnerability is CVE-2024-23618?
CVE-2024-23618 is an arbitrary code execution vulnerability that can be exploited by unauthenticated attackers.
5
Can CVE-2024-23618 be exploited remotely?
Yes, CVE-2024-23618 can be exploited remotely by an unauthenticated attacker.