motorola Archives - CVE Vulnerability

CVE-2020-21937

Sun, 26 Feb 2023 06:39:03 +0000

An command injection vulnerability in HNAP1/SetWLanApcliSettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary system commands.

The post CVE-2020-21937 appeared first on CVE Vulnerability.

CVE-2020-21936

Sun, 26 Feb 2023 06:39:03 +0000

An issue in HNAP1/GetMultipleHNAPs of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to access the components GetStationSettings, GetWebsiteFilterSettings and GetNetworkSettings without authentication.

The post CVE-2020-21936 appeared first on CVE Vulnerability.

CVE-2020-21935

Sun, 26 Feb 2023 06:39:03 +0000

A command injection vulnerability in HNAP1/GetNetworkTomographySettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary code.

The post CVE-2020-21935 appeared first on CVE Vulnerability.

CVE-2020-21934

Sun, 26 Feb 2023 06:39:03 +0000

An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where authentication to download the Syslog could be bypassed.

The post CVE-2020-21934 appeared first on CVE Vulnerability.

CVE-2020-21933

Sun, 26 Feb 2023 06:39:03 +0000

An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where the admin password and private key could be found in the log tar package.

The post CVE-2020-21933 appeared first on CVE Vulnerability.

CVE-2020-21932

Sun, 26 Feb 2023 06:39:03 +0000

A vulnerability in /Login.html of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to bypass login and obtain a partially authorized token and uid.

The post CVE-2020-21932 appeared first on CVE Vulnerability.

CVE-2020-10874

Sun, 26 Feb 2023 06:35:59 +0000

Motorola FX9500 devices allow remote attackers to read database files.

The post CVE-2020-10874 appeared first on CVE Vulnerability.

CVE-2019-9119

Sun, 26 Feb 2023 06:34:51 +0000

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetStaticRouteSettings API function, as demonstrated by shell metacharacters in the staticroute_list field.

The post CVE-2019-9119 appeared first on CVE Vulnerability.

CVE-2019-9121

Sun, 26 Feb 2023 06:34:51 +0000

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetSmartQoSSettings API function, as demonstrated by shell metacharacters in the smartqos_priority_devices field.

The post CVE-2019-9121 appeared first on CVE Vulnerability.

CVE-2019-9120

Sun, 26 Feb 2023 06:34:51 +0000

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetWLanACLSettings API function, as demonstrated by shell metacharacters in the wl(0).(0)_maclist field.

The post CVE-2019-9120 appeared first on CVE Vulnerability.