Critical severity9.6NVD Advisory· Published Jan 26, 2024· Updated Jun 17, 2026

CVE-2024-23618

Description

An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Commscope/Arris Surfboard Sbg6950ac2 Firmware
cpe:2.3:o:commscope:arris_surfboard_sbg6950ac2_firmware:-:*:*:*:*:*:*:*
Arris/SURFboard SGB6950AC2llm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 9.1.103aa23

Patches

Vulnerability mechanics

References

blog.exodusintel.com/2024/01/25/arris-surfboard-sbg6950ac2-arbitrary-command-execution-vulnerability/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.624
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000