Uc 8210 T Lx S Firmware
CVE-2022-3086
HIGH
Severity by source
AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacker to execute arbitrary code.
AnalysisAI
Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which. Rated high severity (CVSS 7.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Command Injection (CWE-77), which allows attackers to inject arbitrary commands into system command execution. Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacker to execute arbitrary code. Affected products include: Moxa Uc-8580-T-Lx Firmware, Moxa Uc-8580-T-Ct-Lx Firmware, Moxa Uc-8580-T-Q-Lx Firmware, Moxa Uc-8580-T-Ct-Q-Lx Firmware, Moxa Uc-8580-Q-Lx Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use parameterized APIs, avoid shell execution, validate input with strict allowlists.
More in Uc 8210 T Lx S Firmware
View allBootloader menu access in Moxa UC series industrial computers can be obtained by attackers with physical access using a
TPM-backed LUKS encryption bypass in Moxa Industrial Linux 3 on select industrial computers allows an attacker with inva
An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain ac
Same weakness CWE-77 – Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today