CVE-2022-34885

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

An improper input sanitization vulnerability in the Motorola MR2600 router could allow a local user with elevated permissions to execute arbitrary code.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
Motorola	MR2600 Router	Versions prior to 1.0.18

References

https://help.motorolanetwork.com/hc/en-us/articles/8161908477595Patch, Vendor Advisory
https://help.motorolanetwork.com/hc/en-us/articles/8161908477595Patch, Vendor Advisory

Timeline

Published: Jan 30, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-348868.8A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing a CVE-2022-348875.4Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers without having to authen CVE-2022-348884.3The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not norma CVE-2022-348898.2This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 17.1.1 (51537). An attacker CVE-2022-34895.3The WP Hide WordPress plugin through 0.0.2 does not have authorisation and CSRF checks in place when updating the custom_wpadmin_slug settin CVE-2022-348908.8This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 17.1.1 (51537). A CVE-2022-348917.8This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An CVE-2022-348927.8This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An CVE-2022-348937.8Trend Micro Security 2022 (consumer) has a link following vulnerability where an attacker with lower privileges could manipulate a mountpoin CVE-2022-348945.3In JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of untrusted services CVE-2022-348997.8This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attac CVE-2022-34907.2The Checkout Field Editor (Checkout Manager) for WooCommerce WordPress plugin before 1.8.0 unserializes user input provided via the settings