CVE-2022-27813: high-severity vulnerability in Motorola Mobile Radio
Unconfigured memory protection modules in Motorola MTM5000
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Motorola MTM5000 radios fail to properly protect shared memory between two processor cores, allowing an attacker who controls one core to take over the other by overwriting code in shared memory.
The firmware does not configure the MPU1 and MPU2 memory protection units on the OMAP-L138 SoC, leaving the trust boundary between ARM and DSP cores unenforced. An adversary with code execution on either core can exploit this to gain arbitrary code execution on the other core by modifying shared RAM or DDR2 regions.
In the same product, most dangerous first.