Back to Database
Status published
Critical
CVE-2024-23618
Arris SURFboard SBG6950AC2 Arbitrary Code Execution Vulnerability
Vulnerability Description
An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-23618
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Exodus Intelligence
More from Arris
View All →CVE-2025-49164
Arris VIP1113 devices through 2025-05-30 with KreaTV SDK have a...
Medium
4.3
CVE-2025-49163
Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting...
Medium
6.7
CVE-2025-49162
Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file...
Medium
6.4
CVE-2024-5196
Arris VAP2500 tools_command.php command injection
Medium
5.1
CVE-2024-5195
Arris VAP2500 diag_s.php command injection
Medium
5.1
Affected Vendor
Arris
View all reports →Affected Software
SURFboard SBG6950AC2
Vulnerable Versions:
9.1.103aa23
Timeline
Official Publish:
January 25th, 2024
Last Modified:
June 17th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H