CVE-2019-11322

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

CVE-2019-11321

An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to obtain information such as the MAC addresses of connected client devices...

CVE-2019-11322

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

CVE-2019-11319

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function downloadFirmware in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

Command injection

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function downloadFirmware in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

CVE-2019-11322

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

CVE-2019-11322

The vulnerability CVE-2019-11322 affects Motorola CX2 1.01 and M2 1.01. A command injection in the function startRmtAssist in hnap allows remote code execution via shell metacharacters in a JSON value. Documented CVSS v3 base score is 9.8 (CRITICAL) with network attack vector, low complexity and ...

CVE-2019-11321

CVE-2019-11321 affects Motorola CX2 1.01 and M2 1.01, where the router opens TCP port 8010 and accepts unauthenticated HNAP requests, enabling retrieval of information such as MAC addresses of connected clients. The root cause is exposed management interface on port 8010 without authentication. P...

CVE-2019-11320

In Motorola CX2 1.01 and M2 1.01, the vulnerability allows accessing the router’s /priv_mgt.html web page to launch telnetd at 192.168.51.1. This indicates a management interface exposure enabling remote telnet without authentication per the CVE notes, with CVSS v2/v3 scores listed as HIGH/CRITIC...

CVE-2019-11319

CVE-2019-11319 affects Motorola CX2 1.01 and M2 1.01. A command injection exists in the downloadFirmware function of hnap, enabling remote code execution via shell metacharacters in a JSON value. Connected sources confirm the issue and its affected products, but do not provide exploit details, sp...