CVE-2022-3086

Cradlepoint IBR600 Command Injection

Published Nov 29, 2022 CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Description
Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable
to shell escape, which enables local attackers with non-superuser
credentials to gain full, unrestrictive shell access which may allow an
attacker to execute arbitrary code.

Remediation

Vendor Solution

Cradlepoint recommends users to update to at least version: * NCOS v7.22.70 NCOS release 7.1.0 and greater are no longer available for manual or offline download and are performed via the NetCloud Manager, which requires a subscription. For more information and NCOS upgrade best practices visit Cradlepoint Netcloud Service https://cradlepoint.com/products/netcloud-service/ . For more information about the latest update, see the Cradlepoint Release Notes https://d2c9o94y5j661e.cloudfront.net/FW-ReleaseNotesNCOS7.22.70-050722.pdf .

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-42515 Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacker to execute arbitrary code.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Subscriptions

Moxa Uc-2101-lx Uc-2101-lx Firmware Uc-2102-lx Uc-2102-lx Firmware Uc-2104-lx Uc-2104-lx Firmware Uc-2111-lx Uc-2111-lx Firmware Uc-2112-lx Uc-2112-lx Firmware Uc-2114-t-lx Uc-2114-t-lx Firmware Uc-2116-t-lx Uc-2116-t-lx Firmware Uc-3101-t-ap-lx Uc-3101-t-ap-lx Firmware Uc-3101-t-eu-lx Uc-3101-t-eu-lx Firmware Uc-3101-t-us-lx Uc-3101-t-us-lx Firmware Uc-3111-t-ap-lx Uc-3111-t-ap-lx-nw Uc-3111-t-ap-lx-nw Firmware Uc-3111-t-ap-lx Firmware Uc-3111-t-eu-lx Uc-3111-t-eu-lx-nw Uc-3111-t-eu-lx-nw Firmware Uc-3111-t-eu-lx Firmware Uc-3111-t-us-lx Uc-3111-t-us-lx-nw Uc-3111-t-us-lx-nw Firmware Uc-3111-t-us-lx Firmware Uc-3121-t-ap-lx Uc-3121-t-ap-lx Firmware Uc-3121-t-eu-lx Uc-3121-t-eu-lx Firmware Uc-3121-t-us-lx Uc-3121-t-us-lx Firmware Uc-5101-lx Uc-5101-lx Firmware Uc-5101-t-lx Uc-5101-t-lx Firmware Uc-5102-lx Uc-5102-lx Firmware Uc-5102-t-lx Uc-5102-t-lx Firmware Uc-5111-lx Uc-5111-lx Firmware Uc-5111-t-lx Uc-5111-t-lx Firmware Uc-5112-lx Uc-5112-lx Firmware Uc-5112-t-lx Uc-5112-t-lx Firmware Uc-8112-lx Uc-8112-lx Firmware Uc-8112a-me-t-lx Uc-8112a-me-t-lx Firmware Uc-8131-lx Uc-8131-lx Firmware Uc-8132-lx Uc-8132-lx Firmware Uc-8162-lx Uc-8162-lx Firmware Uc-8210-t-lx-s Uc-8210-t-lx-s Firmware Uc-8220-t-lx Uc-8220-t-lx-ap-s Uc-8220-t-lx-ap-s Firmware Uc-8220-t-lx-eu-s Uc-8220-t-lx-eu-s Firmware Uc-8220-t-lx-us-s Uc-8220-t-lx-us-s Firmware Uc-8220-t-lx Firmware Uc-8410a-lx Uc-8410a-lx Firmware Uc-8410a-nw-lx Uc-8410a-nw-lx Firmware Uc-8410a-nw-t-lx Uc-8410a-nw-t-lx Firmware Uc-8410a-t-lx Uc-8410a-t-lx Firmware Uc-8540-lx Uc-8540-lx Firmware Uc-8540-t-ct-lx Uc-8540-t-ct-lx Firmware Uc-8540-t-lx Uc-8540-t-lx Firmware Uc-8580-lx Uc-8580-lx Firmware Uc-8580-q-lx Uc-8580-q-lx Firmware Uc-8580-t-ct-lx Uc-8580-t-ct-lx Firmware Uc-8580-t-ct-q-lx Uc-8580-t-ct-q-lx Firmware Uc-8580-t-lx Uc-8580-t-lx Firmware Uc-8580-t-q-lx Uc-8580-t-q-lx Firmware
Weaknesses

Sources

Status
PUBLISHED
Assigner
icscert
Published
Updated
Apr 16, 2025, 5:42 PM
Reserved
Sep 1, 2022, 12:00 AM
Status
Modified
Published
Dec 2, 2022, 8:15 PM
Modified
Jun 17, 2026, 4:58 AM