CVE-2019-11322

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

EUVD-2019-3006

Malware in sbrugna...

EUVD-2019-18504

Malware in sbrugna...

EUVD-2019-3005

Malware in sbrugna...

Motorola CX2 and Motorola M2 Formatting String Error Vulnerability

The Motorola M2 and Motorola CX2 are both products of Motorola, Inc.The Motorola M2 is a smartphone.The Motorola CX2 is a wireless router. A formatting string error vulnerability exists in scopd in Motorola CX2 version 1.01 and Motorola M2 version 1.01. There is an external control over the use o...

CVE-2019-11322

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

CVE-2019-11320

In Motorola CX2 1.01 and M2 1.01, users can access the router's /privmgt.html web page to launch telnetd, as demonstrated by the 192.168.51.1 address...

CVE-2019-11322: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

CVE-2019-11320: Undefined Security Weakness

In Motorola CX2 1.01 and M2 1.01, users can access the router's /privmgt.html web page to launch telnetd, as demonstrated by the 192.168.51.1 address...

PT-2019-12237

Name of the Vulnerable Software and Affected Versions Motorola CX2 version 1.01 Motorola M2 version 1.01 Description An issue allows users to send hnap requests to TCP port 8010 without authentication, potentially obtaining sensitive information such as the MAC addresses of connected client...

PT-2019-12235

Name of the Vulnerable Software and Affected Versions Motorola CX2 version 1.01 Motorola M2 version 1.01 Description A command injection issue in the downloadFirmware function within the hnap module allows for remote code execution. This is achieved by using shell metacharacters in a JSON value...

PT-2019-12238

Name of the Vulnerable Software and Affected Versions Motorola CX2 version 1.01 Motorola M2 version 1.01 Description An issue was discovered that leads to remote code execution via shell metacharacters in a JSON value. This is due to a command injection in the startRmtAssist function in hnap...

CVE-2019-11319: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function downloadFirmware in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

CVE-2019-11321: Missing Authentication for Critical Function

An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to obtain information such as the MAC addresses of connected client devices...

PT-2019-12236

Name of the Vulnerable Software and Affected Versions Motorola CX2 version 1.01 Motorola M2 version 1.01 Description The issue allows users to access the router's "/priv mgt.html" web page to launch telnetd, as demonstrated by the 192.168.51.1 address. Recommendations For Motorola CX2 version 1.0...

Motorola C1 and Motorola M2 OS Command Injection Vulnerability (CNVD-2019-34638)

The Motorola C1 and Motorola M2 are both routers from Motorola USA. An operating system command injection vulnerability exists in the Motorola C1 and Motorola M2. The vulnerability can be exploited to execute arbitrary operating system commands with the help of a specially crafted request...

Motorola C1 and Motorola M2 OS Command Injection Vulnerability (CNVD-2019-34642)

The Motorola C1 and Motorola M2 are both routers from Motorola USA. An operating system command injection vulnerability exists in the Motorola C1 and Motorola M2. The vulnerability can be exploited to execute arbitrary operating system commands with the help of a specially crafted request...

Motorola C1 and Motorola M2 OS Command Injection Vulnerability (CNVD-2019-34639)

The Motorola C1 and Motorola M2 are both routers from Motorola USA. An operating system command injection vulnerability exists in the Motorola C1 and Motorola M2. The vulnerability can be exploited to execute arbitrary operating system commands with the help of a specially crafted request...

Motorola C1 and Motorola M2 OS Command Injection Vulnerability (CNVD-2019-34640)

The Motorola C1 and Motorola M2 are both routers from Motorola USA. An operating system command injection vulnerability exists in the Motorola C1 and Motorola M2. The vulnerability can be exploited to execute arbitrary operating system commands with the help of a specially crafted request...

CVE-2019-9121

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...