Vulnerabilidades em Motorola

56 resultados
Análise Vexday

Com 56 CVEs catalogadas, o histórico de vulnerabilidades da Motorola apresenta uma taxa de exploração ativa abaixo da média geral do catálogo CISA KEV, sem registros confirmados de exploração em curso. Ainda assim, 7 falhas de severidade crítica merecem atenção, e a CVE-2021-3577 se destaca com escore EPSS de aproximadamente 0,60 — o mais elevado do conjunto —, indicando probabilidade relevante de exploração mesmo sem confirmação de uso ativo no momento. O tipo de falha mais recorrente, CWE-926 (exportação imprópria de componentes em aplicações Android), sugere uma superfície de ataque concentrada em controle de acesso a componentes de aplicativos. A ausência de PoCs públicas reduz o risco imediato de reprodução massiva, mas as vulnerabilidades críticas devem ser priorizadas em ciclos de atualização de firmware e software.

CVE-2021-3577HIGHAn unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attEPSS 60.2%CVE-2024-23626CRITICALMotorola MR2600 SaveSysLogParams Command Injection VulnerabilityEPSS 3.5%CVE-2024-23627CRITICALMotorola MR2600 SaveStaticRouteIPv4Params Command Injection VulnerabilityEPSS 3.5%CVE-2024-23628CRITICALMotorola MR2600 SaveStaticRouteIPv6Params Command Injection VulnerabilityEPSS 3.2%CVE-2024-23630CRITICALMotorola MR2600 Arbitrary Firmware Upload VulnerabilityEPSS 1.5%CVE-2024-23629CRITICALMotorola MR2600 Authentication Bypass VulnerabilityEPSS 1.1%CVE-2022-4002HIGHA command injection vulnerability could allow an authenticated user to execute operating system commands as root via a specially crafted APIEPSS 1.0%CVE-2021-3793MEDIUMAn improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow an unauthenticated EPSS 0.7%CVE-2021-3460HIGHThe Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communication with the supportEPSS 0.6%CVE-2022-34885HIGHAn improper input sanitization vulnerability in the Motorola MR2600 router could allow a local user with elevated permissions to execute arbEPSS 0.5%CVE-2021-3792MEDIUMSome device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encrypted which could lead EPSS 0.5%CVE-2023-23770CRITICALMotorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site Controller Man Machine Interface (MMI), allowing EPSS 0.5%CVE-2021-3898MEDIUMVersions of Motorola Ready For and Motorola Device Help Android applications prior to 2021-04-08 do not properly verify the server certificaEPSS 0.4%CVE-2023-23772HIGHMotorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature vEPSS 0.4%CVE-2023-23773HIGHMotorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation foEPSS 0.4%CVE-2021-3791MEDIUMAn information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated atEPSS 0.4%CVE-2022-4003LOWA denial-of-service vulnerability could allow an authenticated user to trigger an internal service restart via a specially crafted API requeEPSS 0.4%CVE-2021-3790MEDIUMA buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated EPSS 0.4%CVE-2022-4001HIGHAn authentication bypass vulnerability could allow an attacker to access API functions without authentication.EPSS 0.3%CVE-2022-26941CRITICALFormat string vulnerability in AT+CTGL command in Motorola MTM5000EPSS 0.3%