CVE-2019-11322

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

CVE-2019-11321

An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to obtain information such as the MAC addresses of connected client devices...

CVE-2019-11320

In Motorola CX2 1.01 and M2 1.01, users can access the router's /privmgt.html web page to launch telnetd, as demonstrated by the 192.168.51.1 address...

CVE-2019-11322

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

Command injection

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function downloadFirmware in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

CVE-2019-11319

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function downloadFirmware in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

CVE-2019-11322

The vulnerability CVE-2019-11322 affects Motorola CX2 1.01 and M2 1.01. A command injection in the function startRmtAssist in hnap allows remote code execution via shell metacharacters in a JSON value. Documented CVSS v3 base score is 9.8 (CRITICAL) with network attack vector, low complexity and ...

CVE-2019-11322

An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value...

CVE-2019-11321

CVE-2019-11321 affects Motorola CX2 1.01 and M2 1.01, where the router opens TCP port 8010 and accepts unauthenticated HNAP requests, enabling retrieval of information such as MAC addresses of connected clients. The root cause is exposed management interface on port 8010 without authentication. P...

CVE-2019-11320

In Motorola CX2 1.01 and M2 1.01, the vulnerability allows accessing the router’s /priv_mgt.html web page to launch telnetd at 192.168.51.1. This indicates a management interface exposure enabling remote telnet without authentication per the CVE notes, with CVSS v2/v3 scores listed as HIGH/CRITIC...

CVE-2019-11319

CVE-2019-11319 affects Motorola CX2 1.01 and M2 1.01. A command injection exists in the downloadFirmware function of hnap, enabling remote code execution via shell metacharacters in a JSON value. Connected sources confirm the issue and its affected products, but do not provide exploit details, sp...

GHSA-FMPQ-W5Q6-9VF9 Moderate severity vulnerability that affects org.apache.jspwiki:jspwiki-main

In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session. No information could be saved on the server or jspwiki database, nor would an attacker be able to execute js on someone else's browser; only on its own browser...

Apache JSPWiki Information Disclosure Vulnerability

Apache JSPWiki is the U.S. Apache Apache Software Foundation of a Java-based , Servlet and JSP to build an open source WikiWiki engine . A security vulnerability exists in Apache JSPWiki versions 2.9.0 through 2.11.0.M2. The vulnerability can be exploited by an attacker to obtain the details of a...

Motorola C1 and Motorola M2 OS Command Injection Vulnerability (CNVD-2019-34640)

The Motorola C1 and Motorola M2 are both routers from Motorola USA. An operating system command injection vulnerability exists in the Motorola C1 and Motorola M2. The vulnerability can be exploited to execute arbitrary operating system commands with the help of a specially crafted request...

Motorola C1 and Motorola M2 OS Command Injection Vulnerability (CNVD-2019-34639)

The Motorola C1 and Motorola M2 are both routers from Motorola USA. An operating system command injection vulnerability exists in the Motorola C1 and Motorola M2. The vulnerability can be exploited to execute arbitrary operating system commands with the help of a specially crafted request...

Motorola C1 and Motorola M2 OS Command Injection Vulnerability (CNVD-2019-34642)

The Motorola C1 and Motorola M2 are both routers from Motorola USA. An operating system command injection vulnerability exists in the Motorola C1 and Motorola M2. The vulnerability can be exploited to execute arbitrary operating system commands with the help of a specially crafted request...

Motorola C1 and Motorola M2 OS Command Injection Vulnerability (CNVD-2019-34638)

The Motorola C1 and Motorola M2 are both routers from Motorola USA. An operating system command injection vulnerability exists in the Motorola C1 and Motorola M2. The vulnerability can be exploited to execute arbitrary operating system commands with the help of a specially crafted request...

CVE-2019-9120

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...

CVE-2019-9119

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...

CVE-2019-9121

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...