CVE-2024-23630

An arbitrary firmware upload vulnerability exists in the MotorolaMR2600. An attacker can exploit this vulnerability to achieve codeexecution on the device. Authentication is required, however can bebypassed.

CVE-2024-23626

A command injection vulnerability exists in the ‘SaveSysLogParams’parameter of the Motorola MR2600. A remote attacker can exploit thisvulnerability to achieve command execution. Authentication is required,however can be bypassed.

CVE-2024-23627

A command injection vulnerability exists in the 'SaveStaticRouteIPv4Params' parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability to achieve command execution. Authentication is required, however can be bypassed.

CVE-2024-23628

A command injection vulnerability exists in the'SaveStaticRouteIPv6Params' parameter of the Motorola MR2600. A remoteattacker can exploit this vulnerability to achieve command execution.Authentication is required, however can be bypassed.

CVE-2024-23629

An authentication bypass vulnerability exists in the web component of the Motorola MR2600. An attacker can exploit this vulnerability to access protected URLs and retrieve sensitive information.