CVE-2019-11322

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

CVE-2019-11319

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function downloadFirmware in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

Command injection

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function downloadFirmware in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

CVE-2019-11322

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

CVE-2019-11322

The vulnerability CVE-2019-11322 affects Motorola CX2 1.01 and M2 1.01. A command injection in the function startRmtAssist in hnap allows remote code execution via shell metacharacters in a JSON value. Documented CVSS v3 base score is 9.8 (CRITICAL) with network attack vector, low complexity and ...

CVE-2019-11321

CVE-2019-11321 affects Motorola CX2 1.01 and M2 1.01, where the router opens TCP port 8010 and accepts unauthenticated HNAP requests, enabling retrieval of information such as MAC addresses of connected clients. The root cause is exposed management interface on port 8010 without authentication. P...

CVE-2019-11320

In Motorola CX2 1.01 and M2 1.01, the vulnerability allows accessing the router’s /priv_mgt.html web page to launch telnetd at 192.168.51.1. This indicates a management interface exposure enabling remote telnet without authentication per the CVE notes, with CVSS v2/v3 scores listed as HIGH/CRITIC...

CVE-2019-11319

CVE-2019-11319 affects Motorola CX2 1.01 and M2 1.01. A command injection exists in the downloadFirmware function of hnap, enabling remote code execution via shell metacharacters in a JSON value. Connected sources confirm the issue and its affected products, but do not provide exploit details, sp...

CVE-2019-11319: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function downloadFirmware in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

CVE-2019-11322: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

CVE-2019-11321: Missing Authentication for Critical Function

An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to obtain information such as the MAC addresses of connected client devices...

PT-2019-12237

Name of the Vulnerable Software and Affected Versions Motorola CX2 version 1.01 Motorola M2 version 1.01 Description An issue allows users to send hnap requests to TCP port 8010 without authentication, potentially obtaining sensitive information such as the MAC addresses of connected client...

PT-2019-12238

Name of the Vulnerable Software and Affected Versions Motorola CX2 version 1.01 Motorola M2 version 1.01 Description An issue was discovered that leads to remote code execution via shell metacharacters in a JSON value. This is due to a command injection in the startRmtAssist function in hnap...

PT-2019-12236

Name of the Vulnerable Software and Affected Versions Motorola CX2 version 1.01 Motorola M2 version 1.01 Description The issue allows users to access the router's "/priv mgt.html" web page to launch telnetd, as demonstrated by the 192.168.51.1 address. Recommendations For Motorola CX2 version 1.0...

CVE-2019-11320: Undefined Security Weakness

In Motorola CX2 1.01 and M2 1.01, users can access the router's /privmgt.html web page to launch telnetd, as demonstrated by the 192.168.51.1 address...

PT-2019-12235

Name of the Vulnerable Software and Affected Versions Motorola CX2 version 1.01 Motorola M2 version 1.01 Description A command injection issue in the downloadFirmware function within the hnap module allows for remote code execution. This is achieved by using shell metacharacters in a JSON value...