Auth bypass in Motorola Mr2600
CVE-2022-3681
A vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an attacker within range of the wireless network to successfully brute force the WPS pin, potentially allowing them unauthorized access to a wireless network.
Vulnerability class: Broken Authentication
EPSS: 0.002 (15.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Motorola Mr2600
- Motorola Mr2600 Router — versions
Weakness classification (CWE)
References
- psirt@lenovo.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2022-3681?
- CVE-2022-3681 is a medium-severity vulnerability in Motorola Mr2600, classified under Improper Authentication. CVSS score: 6.5/10. Published 2023-10-27.
- How severe is CVE-2022-3681?
- Medium severity. CVSS v3 base score is 6.5 out of 10.