Command injection

An command injection vulnerability in HNAP1/SetWLanApcliSettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary system commands...

CVE-2020-21937

CVE-2020-21937 is a command injection in the HNAP1/SetWLanApcliSettings function of the Motorola CX2 router (CX 1.0.2 Build 20190508 Rel.97360n). The vulnerability allows an attacker to execute arbitrary system commands, potentially leading to full device compromise over the network. Affected fir...

CVE-2020-21937

An command injection vulnerability in HNAP1/SetWLanApcliSettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary system commands...

CVE-2020-21936

The CVE-2020-21936 entry applies to the Motorola CX2 router (CX 1.0.2 Build 20190508 Rel.97360n). A flaw in HNAP1/GetMultipleHNAPs lets an unauthenticated attacker access GetStationSettings, GetWebsiteFilterSettings, and GetNetworkSettings. This is a network‑level issue with low attack complexity...

CVE-2020-21935

A command injection vulnerability in HNAP1/GetNetworkTomographySettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary code...

CVE-2020-21935

CVE-2020-21935 affects Motorola CX2 router CX with version 1.0.2 Build 20190508 Rel.97360n, via the HNAP1/GetNetworkTomographySettings function. The vulnerability enables command injection and arbitrary code execution, with network access and no authentication required per cited records. No remed...

CVE-2020-21934

CVE-2020-21934 affects Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n. The issue is an authentication bypass in the Syslog download feature, allowing bypass of protection to access Syslog data. Public references in NVD and RH/PRION/CVE records confirm the vulnerability description; no exp...

CVE-2020-21933

Summary: CVE-2020-21933 affects the Motorola CX2 router (CX 1.0.2 Build 20190508 Rel.97360n). The root cause is that the log tar package exposes sensitive credentials: the admin password and private key can be found within this archive. This indicates a confidential data exposure affecting authen...

CVE-2020-21932

CVE-2020-21932 affects Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n. A flaw in /Login.html allows bypassing authentication to obtain a partially authorized token and UID. Documented by multiple sources (NVD entry and Red Hat/PRION/CVE lists, CNNVD) with the core issue described as an au...

Motorola CX2 授权问题漏洞

The Motorola CX2 is a wireless router from Motorola. An authorization issue vulnerability exists in the Motorola CX2 router, which stems from the lack of an effective privilege control mechanism in the product's login.html. The vulnerability can be exploited to bypass login and obtain an authoriz...

Motorola CX2 操作系统命令注入漏洞

The Motorola CX2 is a wireless router from Motorola USA. An operating system command injection vulnerability exists in the HNAP1 SetWLanApcliSettings of the Motorola CX2 router CX, which allows an attacker to arbitrary system commands...

Motorola CX2 访问控制错误漏洞

The Motorola CX2 is a wireless router from Motorola USA. A security vulnerability in HNAP1 GetMultipleHNAPs in the Motorola CX2 router CX can be exploited to allow an attacker to access the components GetStationSettings, GetWebsiteFilterSettings and GetNetworkSettings without authentication...

PT-2021-10701 · Motorola · Motorola Cx2

Name of the Vulnerable Software and Affected Versions: Motorola CX2 router version 1.0.2 Build 20190508 Rel.97360n Description: A command injection issue in the HNAP1/SetWLanApcliSettings of the Motorola CX2 router allows attackers to execute arbitrary system commands. Recommendations: For versio...

Motorola CX2 操作系统命令注入漏洞

The Motorola CX2 is a wireless router from Motorola USA. A security vulnerability in HNAP1 GetNetworkTomographySettings in the Motorola CX2 router CX allows an attacker to exploit the vulnerability to execute arbitrary code...

Motorola CX2 授权问题漏洞

The Motorola CX2 is a wireless router from Motorola USA. An authorization issue vulnerability exists in the Motorola CX2 router CX, which stems from a lack of valid privilege validation for the Syslog download feature in the product. The following products and versions are affected: Motorola CX2...

CVE-2019-12297

An issue was discovered in scopd on Motorola routers CX2 1.01 and M2 1.01. There is a Use of an Externally Controlled Format String, reachable via TCP port 8010 or UDP port 8080...

CVE-2019-12297

An issue was discovered in scopd on Motorola routers CX2 1.01 and M2 1.01. There is a Use of an Externally Controlled Format String, reachable via TCP port 8010 or UDP port 8080...

CVE-2019-12297

CVE-2019-12297 affects scopd on Motorola CX2 (1.01) and M2 (1.01). The issue is a Use of an Externally Controlled Format String in scopd, reachable via TCP port 8010 or UDP port 8080. Public details in multiple feeds confirm the vulnerable component and exposure surface; Red Hat and NVD entries r...

Motorola CX2 and Motorola M2 Formatting String Error Vulnerability

The Motorola M2 and Motorola CX2 are both products of Motorola, Inc.The Motorola M2 is a smartphone.The Motorola CX2 is a wireless router. A formatting string error vulnerability exists in scopd in Motorola CX2 version 1.01 and Motorola M2 version 1.01. There is an external control over the use o...

CVE-2019-11321

An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to obtain information such as the MAC addresses of connected client devices...