Vulnerability · Published Oct 27, 2023 · Assigned by lenovo
CVE-2022-3681
Medium 6.5
In plain English
A medium-severity improper authentication in MR2600 Router from Motorola. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.3%top 80.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an attacker within range of the wireless network to successfully brute force the WPS pin, potentially allowing them unauthorized access to a wireless network.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Motorola | MR2600 Router | – before v1.0.22 |
Weakness: CWE-287 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N