Motorola Solutions vulnerabilities

7 vulnerabilities

Known vulnerabilities in Motorola Solutions products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
5.1MediumCVE-2024-38279motorola solutions · vigilant fixed lpr coms box (bcav1f2-c600) +1 moreAuthentication Bypass Using an Alternate Path or Channel in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the file system and obtain password hashes.EPSS0.25%7HighCVE-2024-38285motorola solutions · vigilant fixed lpr coms box (bcav1f2-c600)Insufficiently Protected Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)Logs storing credentials are insufficiently protected and can be decoded through the use of open source tools.EPSS0.21%5.1MediumCVE-2024-38283motorola solutions · vigilant fixed lpr coms box (bcav1f2-c600)Missing Encryption of Sensitive Data in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)Sensitive customer information is stored in the device without encryption.EPSS0.10%9.8CriticalCVE-2024-38281motorola solutions · vigilant fixed lpr coms box (bcav1f2-c600) +1 moreUse of Hard-coded Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device.EPSS0.39%8.5HighCVE-2024-38282motorola solutions · vigilant fixed lpr coms box (bcav1f2-c600)Insufficiently Protected Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)Utilizing default credentials, an attacker is able to log into the camera's operating system which could allow changes to be made to the operations or shutdown the camera requiring a physical reboot of the system.EPSS0.16%8.7HighCVE-2024-38284motorola solutions · vigilant fixed lpr coms box (bcav1f2-c600)Authentication Bypass by Capture-replay in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)Transmitted data is logged between the device and the backend service. An attacker could use these logs to perform a replay attack to replicate calls.EPSS0.34%7HighCVE-2024-38280motorola solutions · vigilant fixed lpr coms box (bcav1f2-c600) +1 moreCleartext Storage in a File or on Disk in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)An unauthorized user is able to gain access to sensitive data, including credentials, by physically retrieving the hard disk of the product as the data is stored in clear text.EPSS0.15%