Motorola Phones vulnerabilities
20 vulnerabilities
Known vulnerabilities in Motorola Phones, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-3480motorolaphones
EPSS score0.15%
An Implicit intent vulnerability was reported in the Motorola framework that could allow an attacker to read telephony-related data.CVE-2024-3479motorolaphonesEPSS score0.14%
An improper export vulnerability was reported in the Motorola Enterprise MotoDpms Provider (com.motorola.server.enterprise.MotoDpmsProvider) that could allow a local attacker to read local data.CVE-2024-3108motorolaphonesEPSS score0.15%
An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquire the location of the device without authorization.CVE-2024-3109motorolaphonesEPSS score0.28%
A hard-coded AES key vulnerability was reported in the Motorola GuideMe application, along with a lack of URI sanitation, could allow for a local attacker to read arbitrary files.CVE-2026-5804motorolaphonesEPSS score0.18%
An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit). The application contained a reference to a writable file descriptor in external storage which could be used by third party apps running on the device to open a TCP server, exposing sensitive permissions and data. This could allow a local attacker to bypass permission checks and access protected device settings.CVE-2023-41830motorolaphonesEPSS score0.20%
An improper absolute path traversal vulnerability was reported for the Ready For application allowing a local application access to files without authorization.CVE-2023-41824motorolaphonesEPSS score0.14%
An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data.CVE-2023-41819motorolaphonesEPSS score0.14%
A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local attacker to access unauthorized content providers.CVE-2023-41818motorolaphonesEPSS score0.15%
An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a local attacker to read system logs.CVE-2023-41829motorolaphonesEPSS score0.15%
An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application to read files without authorization.CVE-2023-41816motorolaphonesEPSS score0.14%
An improper export vulnerability was reported in the Motorola Services Main application that could allow a local attacker to write to a local database.CVE-2023-41827motorolaphonesEPSS score0.16%
An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based message on screen UI.CVE-2023-41828motorolaphonesEPSS score0.16%
An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider.CVE-2023-41823motorolaphonesEPSS score0.16%
An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauthorized Activities.CVE-2023-41826motorolaphonesEPSS score0.15%
A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or interact with non-exported software components without permission.CVE-2023-41817motorolaphonesEPSS score0.14%
An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read unauthorized information.CVE-2023-41822motorolaphonesEPSS score0.14%
An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malicious local application to execute OS commands.CVE-2023-41825motorolaphonesEPSS score0.18%
A path traversal vulnerability was reported in the Motorola Ready For application that could allow a local attacker to access local files.CVE-2023-41820motorolaphonesEPSS score0.15%
An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices.CVE-2023-41821motorolaphonesEPSS score0.15%
A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to read sensitive user information.