Motorola vulnerabilities, page 5

118 vulnerabilities

Known vulnerabilities in Motorola products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 85 products.

10CriticalCVE-2019-9121motorola · c1_firmware +1 moremotorola c1_firmwareAn issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetSmartQoSSettings API function, as demonstrated by shell metacharacters in the smartqos_priority_devices field.EPSS4.12%10CriticalCVE-2019-9117motorola · c1_firmware +1 moremotorola c1_firmwareAn issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetNetworkTomographySettings API function, as demonstrated by shell metacharacters in the tomography_ping_number field.EPSS6.18%10CriticalCVE-2019-9120motorola · c1_firmware +1 moremotorola c1_firmwareAn issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetWLanACLSettings API function, as demonstrated by shell metacharacters in the wl(0).(0)_maclist field.EPSS6.18%10CriticalCVE-2019-9118motorola · c1_firmware +1 moremotorola c1_firmwareAn issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetNTPServerSettings API function, as demonstrated by shell metacharacters in the system_time_timezone field.EPSS6.18%10CriticalCVE-2019-9119motorola · c1_firmware +1 moremotorola c1_firmwareAn issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetStaticRouteSettings API function, as demonstrated by shell metacharacters in the staticroute_list field.EPSS6.18%7.8HighCVE-2019-15513motorola · c1_mwr03_firmware +2 moremotorola c1_mwr03_firmwareAn issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) before 15.05.1 as used on Motorola CX2L MWR04L 1.01 and C1 MWR03 1.01 devices. /tmp/.uci/network locking is mishandled after reception of a long SetWanSettings command, leading to a device hang.EPSS1.75%9.8CriticalCVE-2019-12297motorola · cx2_firmware +1 moremotorola cx2_firmwareAn issue was discovered in scopd on Motorola routers CX2 1.01 and M2 1.01. There is a Use of an Externally Controlled Format String, reachable via TCP port 8010 or UDP port 8080.EPSS1.66%7.5HighCVE-2026-18058motorola · smart connect applicationmotorola smart connect applicationThe mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps. When paired with a phishing attack, this manipulation could result in escalated privileges of an attacker within the system.EPSS0.08%8.4HighCVE-2026-5804motorola · phonesmotorola phonesAn improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit). The application contained a reference to a writable file descriptor in external storage which could be used by third party apps running on the device to open a TCP server, exposing sensitive permissions and data. This could allow a local attacker to bypass permission checks and access protected device settings.EPSS0.18%4.8MediumCVE-2026-93832motorola · setup appmotorola setup appA component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps.EPSS0.09%6.5MediumCVE-2023-41830motorola · phonesmotorola phonesAn improper absolute path traversal vulnerability was reported for the Ready For application allowing a local application access to files without authorization.EPSS0.20%2.8LowCVE-2023-41824motorola · phonesmotorola phonesAn implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data.EPSS0.14%6.1MediumCVE-2023-41819motorola · phonesmotorola phonesA PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local attacker to access unauthorized content providers.EPSS0.14%5MediumCVE-2023-41818motorola · phonesmotorola phonesAn improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a local attacker to read system logs.EPSS0.15%5MediumCVE-2023-41829motorola · phonesmotorola phonesAn improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application to read files without authorization.EPSS0.15%5MediumCVE-2023-41816motorola · phonesmotorola phonesAn improper export vulnerability was reported in the Motorola Services Main application that could allow a local attacker to write to a local database.EPSS0.14%5.1MediumCVE-2023-41827motorola · phonesmotorola phonesAn improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based message on screen UI.EPSS0.16%4.4MediumCVE-2023-41828motorola · phonesmotorola phonesAn implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider.EPSS0.16%4.4MediumCVE-2023-41823motorola · phonesmotorola phonesAn improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauthorized Activities.EPSS0.16%5.1MediumCVE-2023-41826motorola · phonesmotorola phonesA PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or interact with non-exported software components without permission.EPSS0.15%