[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftX30UyZHyJenhIX8MOnf2KeUH7G6a3kVL10Nr71gvaw":3,"g5a-risk:CVE-2024-23618":126},{"success":4,"data":5,"meta":124},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":53,"epssPercentile":29,"epssTimeSeries":54,"severity":55,"affectedProducts":56,"affectedProductsCount":65,"references":66,"referencesCount":65,"weaknesses":74,"weaknessesCount":82,"isActivelyExploited":51,"cisaInfo":29,"otxData":29,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":122,"notableEvents":123},"CVE-2024-23618","What is CVE-2024-23618?","An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root.","An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve...","2024-01-26T00:15:09.263","2026-06-17T07:13:14.67",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":40,"CVSSMetricV2":41,"CVSSMetricV40":52},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"disclosures@exodusintel.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","ADJACENT_NETWORK","LOW","NONE","CHANGED","HIGH",9.6,"CRITICAL",null,2.8,6,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":38,"ImpactScore":39},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":36,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":37,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"NETWORK","UNCHANGED",3.9,5.9,[],[42],{"Source":17,"Type":18,"CVSSData":43,"BaseSeverity":26,"ExploitabilityScore":49,"ImpactScore":50,"ACInsufInfo":51,"ObtainAllPrivilege":51,"ObtainUserPrivilege":51,"ObtainOtherPrivilege":51,"UserInteractionRequired":51},{"Version":44,"VectorString":45,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":46,"IntegrityImpact":46,"AvailabilityImpact":46,"BaseScore":47,"BaseSeverity":48,"Exploitability":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"CollateralDamagePotential":29,"TargetDistribution":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"EnvironmentalScore":29},"2.0","AV:A\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",8.3,"",6.5,10,false,[],0.0121,[53,53,53,53,53,53,53],"Critical",[57,62],{"vendor":58,"product":59,"version":60,"criteria":61,"vulnerable":4},"commscope","arris_surfboard_sbg6950ac2_firmware","-","cpe:2.3:o:commscope:arris_surfboard_sbg6950ac2_firmware:-:*:*:*:*:*:*:*",{"vendor":58,"product":63,"version":60,"criteria":64,"vulnerable":51},"arris_surfboard_sbg6950ac2","cpe:2.3:h:commscope:arris_surfboard_sbg6950ac2:-:*:*:*:*:*:*:*",2,[67,72],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fblog.exodusintel.com\u002F2024\u002F01\u002F25\u002Farris-surfboard-sbg6950ac2-arbitrary-command-execution-vulnerability\u002F","Exodusintel",[71],"Third Party Advisory",{"url":68,"source":69,"tags":73},[71],[75],{"id":76,"name":77,"description":78,"extendedDescription":48,"status":79,"abstraction":80,"structure":81},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","Draft","Base","Simple",1,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2024-23618? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-23618, a critical severity cyber security vulnerability from 2024. An arbitrary code execution vulnerability exists in Arr...","CVE-2024-23618, CVE-2024-23618 vulnerability, CVE-2024-23618 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, commscope security, arris_surfboard_sbg6950ac2_firmware vulnerability, arris_surfboard_sbg6950ac2 vulnerability","\u002Fwhat-is\u002Fcve-2024-23618",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-23618","Cybersecurity","CVE-2024-23618, CVE-2024-23618 vulnerability, CVE-2024-23618 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110],{"Operator":111,"Negate":29,"Nodes":112},"AND",[113,118],{"Operator":114,"Negate":51,"CPEMatch":115},"OR",[116],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":117,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"705A2647-E324-45F4-9159-3899B7A8F3A7",{"Operator":114,"Negate":51,"CPEMatch":119},[120],{"Vulnerable":51,"Criteria":64,"MatchCriteriaID":121,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"C886BE42-DD25-41A9-AEB9-64C123E09967",[],[],{"lastModified":11,"cacheTime":125,"version":44},1792386864064,{"score":127,"band":128,"action":129,"scoredAt":130},55,"Medium","Plan remediation","2026-10-16T07:00:36.095843+00:00"]