CVE-2024-45880

A command injection vulnerability exists in Motorola CX2L router v1.0.2 and below. The vulnerability is present in the SetStationSettings function. The system directly invokes the system function to execute commands for setting parameters such as MAC address without proper input filtering. This allows malicious users to inject and execute arbitrary commands.

• CWE-78

• https://github.com/N1nEmAn/wp/blob/main/m0tOrol%40-Cx2l.pdf

Published

Oct 8, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-45875The create user function in baltic-it TOPqw Webportal 1.35.2…5.4
• CVE-2024-45876The login form of baltic-it TOPqw Webportal v1.35.283.2 (fix…6.5
• CVE-2024-45877baltic-it TOPqw Webportal v1.35.283.2 is vulnerable to Incor…6.5
• CVE-2024-45878The "Stammdaten" menu of baltic-it TOPqw Webportal v1.35.283…5.4
• CVE-2024-45879The file upload function in the "QWKalkulation" tool of balt…5.4
• CVE-2024-4588A vulnerability was found in DedeCMS 5.7. It has been classi…4.3
• CVE-2024-45882DrayTek Vigor3900 1.5.1.3 contains a command injection vulne…8
• CVE-2024-45884DrayTek Vigor3900 1.5.1.3 contains a post-authentication com…8
• CVE-2024-45885DrayTek Vigor3900 1.5.1.3 contains a post-authentication com…8
• CVE-2024-45887DrayTek Vigor3900 1.5.1.3 contains a post-authentication com…8
• CVE-2024-45888DrayTek Vigor3900 1.5.1.3 contains a command injection vulne…8
• CVE-2024-45889DrayTek Vigor3900 1.5.1.3 contains a post-authentication com…8