CVE-2022-3086: Cradlepoint IBR600 Command Injection

Severity: high (CVSS 7.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-12-02 · updated 2026-06-17
Weakness: CWE-77

Description

Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior are vulnerable to shell escape, which enables local attackers with non-superuser credentials to gain full, unrestrictive shell access which may allow an attacker to execute arbitrary code.

Affected products

Moxa Uc-2101-Lx Firmware: from 1.3 through 1.5
Moxa Uc-2102-Lx Firmware: from 1.3 through 1.5
Moxa Uc-2104-Lx Firmware: from 1.3 through 1.5
Moxa Uc-2111-Lx Firmware: from 1.3 through 1.5
Moxa Uc-2112-Lx Firmware: from 1.3 through 1.5
Moxa Uc-2114-T-Lx Firmware: from 1.3 through 1.5
Moxa Uc-2116-T-Lx Firmware: from 1.3 through 1.5
Moxa Uc-3101-T-Ap-Lx Firmware: from 1.2 through 2.0
Moxa Uc-3101-T-Eu-Lx Firmware: from 1.2 through 2.0
Moxa Uc-3101-T-Us-Lx Firmware: from 1.2 through 2.0
Moxa Uc-3111-T-Ap-Lx-Nw Firmware: from 1.2 through 2.0
Moxa Uc-3111-T-Ap-Lx Firmware: from 1.2 through 2.0
Moxa Uc-3111-T-Eu-Lx-Nw Firmware: from 1.2 through 2.0
Moxa Uc-3111-T-Eu-Lx Firmware: from 1.2 through 2.0
Moxa Uc-3111-T-Us-Lx-Nw Firmware: from 1.2 through 2.0
Moxa Uc-3111-T-Us-Lx Firmware: from 1.2 through 2.0
Moxa Uc-3121-T-Ap-Lx Firmware: from 1.2 through 2.0
Moxa Uc-3121-T-Eu-Lx Firmware: from 1.2 through 2.0
Moxa Uc-3121-T-Us-Lx Firmware: from 1.2 through 2.0
Moxa Uc-5101-Lx Firmware: 1.2
Moxa Uc-5101-T-Lx Firmware: 1.2
Moxa Uc-5102-Lx Firmware: 1.2
Moxa Uc-5102-T-Lx Firmware: 1.2
Moxa Uc-5111-Lx Firmware: 1.2
Moxa Uc-5111-T-Lx Firmware: 1.2
Moxa Uc-5112-Lx Firmware: 1.2
Moxa Uc-5112-T-Lx Firmware: 1.2
Moxa Uc-8112-Lx Firmware: 1.2, 1.3
Moxa Uc-8112A-Me-T-Lx Firmware: 1.0, 1.1
Moxa Uc-8131-Lx Firmware: 1.2, 1.3

References

Get alerted when CVE-2022-3086 or the next vulnerability affects your stack