motorola Vulnerability Advisory Catalog

Total 83 security vulnerabilities recorded for motorola software and firmware.

← Back to All Vendors
Component: cx2l_firmware

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the system_time_timezone parameter....

๐Ÿ“… 2023-05-11
CVSS 8.8 Dossier →
Component: cx2l_firmware

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the staticroute_list parameter....

๐Ÿ“… 2023-05-11
CVSS 8.8 Dossier →
Component: mr2600_firmware

An improper input sanitization vulnerability in the Motorola MR2600 router could allow a local user with elevated permissions to execute arbitrary cod...

๐Ÿ“… 2023-01-30
CVSS 7.2 Dossier →
CVE-2022-3917 MEDIUM
Component: moto_e20_firmware

Improper access control of bootloader functionย was discovered in Motorola Mobility Motorola e20 prior to version RONS31.267-38-8 allows attacker with ...

๐Ÿ“… 2022-12-14
CVSS 4.6 Dossier →
Component: moscad_ip_gateway_firmware

The Motorola MOSCAD and ACE line of RTUs through 2022-05-02 omit an authentication requirement. They feature IP Gateway modules which allow for interf...

๐Ÿ“… 2022-07-26
CVSS 7.5 Dossier →
CVE-2022-30274 CRITICAL
Component: ace1000_firmware

The Motorola ACE1000 RTU through 2022-05-02 uses ECB encryption unsafely. It can communicate with an XRT LAN-to-radio gateway by means of an embedded ...

๐Ÿ“… 2022-07-26
CVSS 9.8 Dossier →
Component: ace1000_firmware

The Motorola ACE1000 RTU through 2022-05-02 mishandles firmware integrity. It utilizes either the STS software suite or ACE1000 Easy Configurator for ...

๐Ÿ“… 2022-07-26
CVSS 7.2 Dossier →
CVE-2022-30271 CRITICAL
Component: ace1000_firmware

The Motorola ACE1000 RTU through 2022-05-02 ships with a hardcoded SSH private key and initialization scripts (such as /etc/init.d/sshd_service) only ...

๐Ÿ“… 2022-07-26
CVSS 9.8 Dossier →
CVE-2022-30270 CRITICAL
Component: ace1000_firmware

The Motorola ACE1000 RTU through 2022-05-02 has default credentials. It exposes an SSH interface on port 22/TCP. This interface is used for remote mai...

๐Ÿ“… 2022-07-26
CVSS 9.8 Dossier →
Component: ace1000_firmware

Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom application installation via either STS software, the ...

๐Ÿ“… 2022-07-26
CVSS 8.8 Dossier →
CVE-2021-3898 MEDIUM
Component: device_help

Versions of Motorola Ready For and Motorola Device Help Android applications prior to 2021-04-08 do not properly verify the server certificate which c...

๐Ÿ“… 2022-04-22
CVSS 6.8 Dossier →
Component: t008_firmware

Certain Motorola Solutions Avigilon devices allow XSS in the administrative UI. This affects T200/201 before 4.10.0.68; T290 before 4.4.0.80; T008 bef...

๐Ÿ“… 2021-12-15
CVSS 4.8 Dossier →
CVE-2021-3459 MEDIUM
Component: mm1000_firmware

A privilege escalation vulnerability was reported in the MM1000 device configuration web server, which could allow privileged shell access and/or arbi...

๐Ÿ“… 2021-08-17
CVSS 6.8 Dossier →
CVE-2021-3458 MEDIUM
Component: mm1000_firmware

The Motorola MM1000 device configuration portal can be accessed without authentication, which could allow adapter settings to be modified....

๐Ÿ“… 2021-08-17
CVSS 6.1 Dossier →
CVE-2020-21937 CRITICAL
Component: cx2_firmware

An command injection vulnerability in HNAP1/SetWLanApcliSettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute...

๐Ÿ“… 2021-07-21
CVSS 9.8 Dossier →
Component: cx2_firmware

An issue in HNAP1/GetMultipleHNAPs of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to access the components GetStationSetti...

๐Ÿ“… 2021-07-21
CVSS 5.3 Dossier →
CVE-2020-21935 CRITICAL
Component: cx2_firmware

A command injection vulnerability in HNAP1/GetNetworkTomographySettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to ...

๐Ÿ“… 2021-07-21
CVSS 9.8 Dossier →
Component: cx2_firmware

An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where authentication to download the Syslog could be bypassed....

๐Ÿ“… 2021-07-21
CVSS 7.5 Dossier →
Component: cx2_firmware

An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where the admin password and private key could be found in the log t...

๐Ÿ“… 2021-07-21
CVSS 7.5 Dossier →
Component: cx2_firmware

A vulnerability in /Login.html of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to bypass login and obtain a partially autho...

๐Ÿ“… 2021-07-21
CVSS 5.3 Dossier →
Component: mh702x_firmware

The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communication with the support server wh...

๐Ÿ“… 2021-04-13
CVSS 8.1 Dossier →
Component: fx9500-41324d41-us_firmware

Motorola FX9500 devices allow remote attackers to read database files....

๐Ÿ“… 2020-03-23
CVSS 7.5 Dossier →
CVE-2019-16257 CRITICAL
Component: motorola_firmware

Some Motorola devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location a...

๐Ÿ“… 2019-09-12
CVSS 9.8 Dossier →
Component: cx2l_mwr04l_firmware

On the Motorola router CX2L MWR04L 1.01, there is a stack consumption (infinite recursion) issue in scopd via TCP port 8010 and UDP port 8080. It is c...

๐Ÿ“… 2019-07-01
CVSS 7.5 Dossier →
Page 2 of 4 (83 Total Records)