CVE-2022-3086 HIGH

CVE-2022-3086: Cradlepoint IBR600 Command Injection

Vendor Cradlepoint
Product IBR600
Weakness CWE-77
Published November 29, 2022
Last update April 16, 2025
View on NVD All CVEs

CVSS base score

7.1/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacker to execute arbitrary code.

Key dates

02Disclosure timeline

November 29, 2022 CVE published
April 16, 2025 Record updated