Motorola vulnerabilities
118 vulnerabilities
Known vulnerabilities in Motorola products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 85 products.
Products
50 of 85- Phones20 vulnerabilities
- Cx211 vulnerabilities
- M210 vulnerabilities
- Binatone Hubble Cameras8 vulnerabilities
- Mr26007 vulnerabilities
- Ace10005 vulnerabilities
- C15 vulnerabilities
- Cx2L5 vulnerabilities
- Mobile Radio4 vulnerabilities
- Mtm54004 vulnerabilities
- Mtm55004 vulnerabilities
- Mbts Site Controller3 vulnerabilities
- Mx011Anm3 vulnerabilities
- Pebl U63 vulnerabilities
- Q14 Mesh Router3 vulnerabilities
- Surfboard3 vulnerabilities
- Vigilant Fixed Lpr Coms Box3 vulnerabilities
- Android2 vulnerabilities
- Cx2L Mwr04L2 vulnerabilities
- Defy Xt2 vulnerabilities
- Ebts/Mbts Base Radio2 vulnerabilities
- Mbts Base Radio2 vulnerabilities
- Mm10002 vulnerabilities
- Mm1000 Moca Adapter2 vulnerabilities
- Motorola Scanner Sdk2 vulnerabilities
- Mr2600 Router2 vulnerabilities
- Q142 vulnerabilities
- Timbuktu2 vulnerabilities
- Atrix Hd1 vulnerabilities
- C1 Mwr031 vulnerabilities
- Device Help1 vulnerabilities
- Device Help Android App1 vulnerabilities
- Ebts Base Radio1 vulnerabilities
- Ebts Site Controller1 vulnerabilities
- Edge+ 20231 vulnerabilities
- Edge 40 Pro1 vulnerabilities
- Fx9500 41324D41 Us1 vulnerabilities
- Fx9500 41324D41 Ww1 vulnerabilities
- Fx9500 81324D41 Us1 vulnerabilities
- Fx9500 81324D41 Ww1 vulnerabilities
- G341 vulnerabilities
- G34T1 vulnerabilities
- G45 5G1 vulnerabilities
- Mbp8531 vulnerabilities
- Mh702X1 vulnerabilities
- Moto E201 vulnerabilities
- Motorazr1 vulnerabilities
- Motorola1 vulnerabilities
- Motorola Cable Modem1 vulnerabilities
- Netoctopus1 vulnerabilities
CVE-2018-20399motorolasbg901_firmware+2
EPSS score2.59%
Motorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and SVG1202 SVG1202-2.1.0.0-GA-14-LTSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.CVE-2018-12499motorolambp853_firmwareEPSS score0.48%
The Motorola MBP853 firmware does not correctly validate server certificates. This allows for a Man in The Middle (MiTM) attack to take place between a Motorola MBP853 camera and the servers it communicates with. In one such instance, it was identified that the device was downloading what appeared to be a client certificate.CVE-2013-2596debianlinux+10KEVEPSS score3.21%
Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.CVE-2013-4777googleandroid+1EPSS score0.21%
A certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless uses init to create a /dev/socket/init_runit socket that listens for shell commands, which allows local users to gain privileges by interacting with a LocalSocket object.CVE-2013-5933googleandroid+1EPSS score0.18%
Stack-based buffer overflow in the sub_E110 function in init in a certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless allows local users to gain privileges or cause a denial of service (memory corruption) by writing a long string to the /dev/socket/init_runit socket that is inconsistent with a certain length value that was previously written to this socket.CVE-2013-3051motorolaandroid+4EPSS score0.23%
The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset does not verify the association between a certain physical-address argument and a memory region, which allows local users to unlock the bootloader by using kernel mode to perform crafted 0x9 and 0x2 SMC operations, a different vulnerability than CVE-2013-2596.CVE-2021-38701motorolat008_firmware+9EPSS score0.47%
Certain Motorola Solutions Avigilon devices allow XSS in the administrative UI. This affects T200/201 before 4.10.0.68; T290 before 4.4.0.80; T008 before 2.2.0.86; T205 before 4.12.0.62; T204 before 3.28.0.166; and T100, T101, T102, and T103 before 2.6.0.180.CVE-2021-3793binatoneglobalcn28_firmware+21EPSS score0.69%
An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow an unauthenticated attacker on the same network as the device to access administrative pages that could result in information disclosure or device firmware update with verified firmware.CVE-2021-3458motorolamm1000_firmware+1EPSS score0.24%
The Motorola MM1000 device configuration portal can be accessed without authentication, which could allow adapter settings to be modified.CVE-2021-3898motoroladevice_help+3EPSS score0.46%
Versions of Motorola Ready For and Motorola Device Help Android applications prior to 2021-04-08 do not properly verify the server certificate which could lead to the communication channel being accessible by an attacker.CVE-2021-3459motorolamm1000_firmware+1EPSS score0.29%
A privilege escalation vulnerability was reported in the MM1000 device configuration web server, which could allow privileged shell access and/or arbitrary privileged commands to be executed on the adapter.CVE-2021-3792binatoneglobalcn28_firmware+21EPSS score0.49%
Some device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encrypted which could lead to the communication channel being accessible by an attacker.CVE-2021-3577binatoneglobalcn28_firmware+21EPSS score60.16%
An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker on the same network unauthorized access to the device.CVE-2021-3789binatoneglobalcn28_firmware+21EPSS score0.09%
An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access to obtain the encryption key used to decrypt firmware update packages.CVE-2021-3460motorolamh702x_firmwareEPSS score0.56%
The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communication with the support server which could lead to the communication channel being accessible by an attacker.CVE-2021-3791binatoneglobalcn28_firmware+21EPSS score0.42%
An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same subnet to download an encrypted log file containing sensitive information such as WiFi SSID and password.CVE-2021-3787binatoneglobalcn28_firmware+21EPSS score0.17%
A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local access to obtain the MQTT credentials that could result in unauthorized access to backend Hubble services.CVE-2021-3790binatoneglobalcn28_firmware+21EPSS score0.40%
A buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same network to perform a denial-of-service attack against the device.CVE-2021-3788binatoneglobalcn28_firmware+21EPSS score0.24%
An exposed debug interface was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access unauthorized access to the device.CVE-2015-1496motorolamotorola_scanner_sdkEPSS score0.48%
Motorola Scanner SDK uses weak permissions for (1) CoreScanner.exe, (2) rsmdriverproviderservice.exe, and (3) ScannerService.exe, which allows local users to gain privileges via unspecified vectors.