motorola Vulnerability Advisory Catalog

Total 83 security vulnerabilities recorded for motorola software and firmware.

← Back to All Vendors
Component: q14_firmware

A denial-of-service vulnerability could allow an authenticated user to trigger an internal service restart via a specially crafted API request....

๐Ÿ“… 2024-07-31
CVSS 2.7 Dossier →
Component: q14_firmware

A command injection vulnerability could allow an authenticated user to execute operating system commands as root via a specially crafted API request....

๐Ÿ“… 2024-07-31
CVSS 7.2 Dossier →
CVE-2024-38281 CRITICAL
Component: vigilant_fixed_lpr_coms_box_firmware

An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device....

๐Ÿ“… 2024-06-13
CVSS 9.8 Dossier →
Component: vigilant_fixed_lpr_coms_box_firmware

An unauthorized user is able to gain access to sensitive data, including credentials, by physically retrieving the hard disk of the product as the dat...

๐Ÿ“… 2024-06-13
CVSS 4.6 Dossier →
Component: vigilant_fixed_lpr_coms_box_firmware

The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the f...

๐Ÿ“… 2024-06-13
CVSS 4.6 Dossier →
Component: cx2l_firmware

A hidden interface in Motorola CX2L Router firmware v1.0.1 leaks information regarding the SystemWizardStatus component via sending a crafted request ...

๐Ÿ“… 2024-02-12
CVSS 5.3 Dossier →
CVE-2024-23630 CRITICAL
Component: mr2600_firmware

An arbitrary firmware upload vulnerability exists in the Motorola MR2600. An attacker can exploit this vulnerability to achieve code execution on th...

๐Ÿ“… 2024-01-26
CVSS 9.0 Dossier →
CVE-2024-23629 CRITICAL
Component: mr2600_firmware

An authentication bypass vulnerability exists in the web component of the Motorola MR2600. An attacker can exploit this vulnerability to access protec...

๐Ÿ“… 2024-01-26
CVSS 9.6 Dossier →
CVE-2024-23628 CRITICAL
Component: mr2600_firmware

A command injection vulnerability exists in the 'SaveStaticRouteIPv6Params' parameter of the Motorola MR2600. A remote attacker can exploit this vul...

๐Ÿ“… 2024-01-26
CVSS 9.0 Dossier →
CVE-2024-23627 CRITICAL
Component: mr2600_firmware

A command injection vulnerability exists in the 'SaveStaticRouteIPv4Params' parameter of the Motorola MR2600. A remote attacker can exploit this vulne...

๐Ÿ“… 2024-01-26
CVSS 9.0 Dossier →
CVE-2024-23626 CRITICAL
Component: mr2600_firmware

A command injection vulnerability exists in the โ€˜SaveSysLogParamsโ€™ parameter of the Motorola MR2600. A remote attacker can exploit this vulnerabilit...

๐Ÿ“… 2024-01-26
CVSS 9.0 Dossier →
CVE-2022-3681 MEDIUM
Component: mr2600

A vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an attacker within range of the wireless network to succ...

๐Ÿ“… 2023-10-27
CVSS 6.5 Dossier →
Component: mtm5500_firmware

Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores. The SoC provides...

๐Ÿ“… 2023-10-19
CVSS 8.1 Dossier →
Component: mtm5500_firmware

The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source. Lo...

๐Ÿ“… 2023-10-19
CVSS 8.8 Dossier →
Component: mtm5500_firmware

The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment (TEE) modules. Two modules are used...

๐Ÿ“… 2023-10-19
CVSS 8.2 Dossier →
CVE-2022-26941 CRITICAL
Component: mtm5500_firmware

A format string vulnerability exists in Motorola MTM5000 series firmware AT command handler for the AT+CTGL command. An attacker-controllable string i...

๐Ÿ“… 2023-10-19
CVSS 9.6 Dossier →
CVE-2022-3407 MEDIUM
Component: smartphone_firmware

I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user orig...

๐Ÿ“… 2023-09-01
CVSS 4.9 Dossier →
Component: ebts_site_controller_firmware

Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the devic...

๐Ÿ“… 2023-08-29
CVSS 8.4 Dossier →
Component: ebts_base_radio_firmware

Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware...

๐Ÿ“… 2023-08-29
CVSS 7.2 Dossier →
Component: mbts_site_controller_firmware

Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation ...

๐Ÿ“… 2023-08-29
CVSS 7.2 Dossier →
Component: mbts_base_radio_firmware

Motorola MBTS Base Radio accepts hard-coded backdoor password. The Motorola MBTS Base Radio Man Machine Interface (MMI), allowing for service technici...

๐Ÿ“… 2023-08-29
CVSS 8.4 Dossier →
CVE-2023-23770 CRITICAL
Component: mbts_site_controller_firmware

Motorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site Controller Man Machine Interface (MMI), allowing for servic...

๐Ÿ“… 2023-08-29
CVSS 9.4 Dossier →
Component: cx2l_firmware

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the tomography_ping_number parameter....

๐Ÿ“… 2023-05-11
CVSS 8.8 Dossier →
Component: cx2l_firmware

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the smartqos_priority_devices parameter....

๐Ÿ“… 2023-05-11
CVSS 8.8 Dossier →
Page 1 of 4 (83 Total Records)