Vulnerabilities > Motorola

DATE CVE VULNERABILITY TITLE RISK
2024-01-26 CVE-2024-23630 Unrestricted Upload of File with Dangerous Type vulnerability in Motorola Mr2600 Firmware
An arbitrary firmware upload vulnerability exists in the Motorola MR2600.
network
low complexity
motorola CWE-434
8.8
2023-10-27 CVE-2022-3681 Improper Authentication vulnerability in Motorola Mr2600
A vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an attacker within range of the wireless network to successfully brute force the WPS pin, potentially allowing them unauthorized access to a wireless network.
low complexity
motorola CWE-287
6.5
2023-10-19 CVE-2022-26941 Use of Externally-Controlled Format String vulnerability in Motorola Mtm5400 Firmware and Mtm5500 Firmware
A format string vulnerability exists in Motorola MTM5000 series firmware AT command handler for the AT+CTGL command.
low complexity
motorola CWE-134
8.8
2023-10-19 CVE-2022-26942 Release of Invalid Pointer or Reference vulnerability in Motorola Mtm5400 Firmware and Mtm5500 Firmware
The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment (TEE) modules.
local
low complexity
motorola CWE-763
8.2
2023-10-19 CVE-2022-26943 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Motorola Mtm5400 Firmware and Mtm5500 Firmware
The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source.
low complexity
motorola CWE-338
8.8
2023-10-19 CVE-2022-27813 Unspecified vulnerability in Motorola Mtm5400 Firmware and Mtm5500 Firmware
Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores.
local
low complexity
motorola
8.2
2023-09-01 CVE-2022-3407 Improper Resource Shutdown or Release vulnerability in Motorola Smartphone Firmware
I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed.
low complexity
motorola CWE-404
4.3
2023-08-29 CVE-2023-23770 Use of Hard-coded Credentials vulnerability in Motorola Mbts Site Controller Firmware R05.32.58
Motorola MBTS Site Controller accepts hard-coded backdoor password.
network
low complexity
motorola CWE-798
critical
9.8
2023-08-29 CVE-2023-23771 Use of Hard-coded Credentials vulnerability in Motorola Mbts Base Radio Firmware R05.X2.57
Motorola MBTS Base Radio accepts hard-coded backdoor password.
local
low complexity
motorola CWE-798
8.4
2023-08-29 CVE-2023-23772 Improper Verification of Cryptographic Signature vulnerability in Motorola Mbts Site Controller Firmware R05.32.58
Motorola MBTS Site Controller fails to check firmware update authenticity.
network
low complexity
motorola CWE-347
8.8