Motorola vulnerabilities, page 4
118 vulnerabilities
Known vulnerabilities in Motorola products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 85 products.
CVE-2024-38279motorola solutionsvigilant fixed lpr coms box (bcav1f2-c600)+1
EPSS score0.25%
The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the file system and obtain password hashes.CVE-2024-38281motorola solutionsvigilant fixed lpr coms box (bcav1f2-c600)+1EPSS score0.39%
An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device.CVE-2024-38280motorola solutionsvigilant fixed lpr coms box (bcav1f2-c600)+1EPSS score0.15%
An unauthorized user is able to gain access to sensitive data, including credentials, by physically retrieving the hard disk of the product as the data is stored in clear text.CVE-2024-3480motorolaphonesEPSS score0.15%
An Implicit intent vulnerability was reported in the Motorola framework that could allow an attacker to read telephony-related data.CVE-2024-3479motorolaphonesEPSS score0.14%
An improper export vulnerability was reported in the Motorola Enterprise MotoDpms Provider (com.motorola.server.enterprise.MotoDpmsProvider) that could allow a local attacker to read local data.CVE-2024-3108motorolaphonesEPSS score0.15%
An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquire the location of the device without authorization.CVE-2024-3109motorolaphonesEPSS score0.28%
A hard-coded AES key vulnerability was reported in the Motorola GuideMe application, along with a lack of URI sanitation, could allow for a local attacker to read arbitrary files.CVE-2024-23630motorolamr2600_firmwareEPSS score1.52%
An arbitrary firmware upload vulnerability exists in the Motorola
MR2600. An attacker can exploit this vulnerability to achieve code
execution on the device. Authentication is required, however can be
bypassed.CVE-2024-23626motorolamr2600_firmwareEPSS score3.54%
A command injection vulnerability exists in the ‘SaveSysLogParams’
parameter of the Motorola MR2600. A remote attacker can exploit this
vulnerability to achieve command execution. Authentication is required,
however can be bypassed.CVE-2024-23628motorolamr2600_firmwareEPSS score3.17%
A command injection vulnerability exists in the
'SaveStaticRouteIPv6Params' parameter of the Motorola MR2600. A remote
attacker can exploit this vulnerability to achieve command execution.
Authentication is required, however can be bypassed.CVE-2024-23629motorolamr2600_firmwareEPSS score1.08%
An authentication bypass vulnerability exists in the web component of the Motorola MR2600. An attacker can exploit this vulnerability to access protected URLs and retrieve sensitive information.CVE-2024-23627motorolamr2600_firmwareEPSS score3.54%
A command injection vulnerability exists in the 'SaveStaticRouteIPv4Params' parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability to achieve command execution. Authentication is required, however can be bypassed.CVE-2002-1944motorolasurfboardEPSS score1.74%
Motorola Surfboard 4200 cable modem allows remote attackers to cause a denial of service (crash) by performing a SYN scan using a tool such as nmap.CVE-2009-1394motorolatimbuktu_proEPSS score33.28%
Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending a long malformed string over the PlughNTCommand named pipe.CVE-2019-16257motorolamotorola_firmwareEPSS score2.10%
Some Motorola devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or execute certain commands, via SIM Toolkit (STK) instructions in an SMS message, aka Simjacker.CVE-2019-13129motorolacx2l_mwr04l_firmwareEPSS score1.42%
On the Motorola router CX2L MWR04L 1.01, there is a stack consumption (infinite recursion) issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length handling.CVE-2019-11322motorolacx2_firmware+1EPSS score3.91%
An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value.CVE-2019-11319motorolacx2_firmware+1EPSS score3.91%
An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function downloadFirmware in hnap, which leads to remote code execution via shell metacharacters in a JSON value.CVE-2019-11320motorolacx2_firmware+1EPSS score1.72%
In Motorola CX2 1.01 and M2 1.01, users can access the router's /priv_mgt.html web page to launch telnetd, as demonstrated by the 192.168.51.1 address.CVE-2019-11321motorolacx2_firmware+1EPSS score1.33%
An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to obtain information such as the MAC addresses of connected client devices.