Vulnerabilities > Motorola > Low

DATE CVE VULNERABILITY TITLE RISK
2021-12-15 CVE-2021-38701 Cross-site Scripting vulnerability in Motorola products
Certain Motorola Solutions Avigilon devices allow XSS in the administrative UI.
network
motorola CWE-79
3.5
2021-08-17 CVE-2021-3458 Improper Authentication vulnerability in Motorola Mm1000 Firmware
The Motorola MM1000 device configuration portal can be accessed without authentication, which could allow adapter settings to be modified.
local
low complexity
motorola CWE-287
2.1
2017-07-31 CVE-2017-9495 Information Exposure vulnerability in Motorola Mx011Anm Firmware Mx011An2.9P6S1Prodsey
The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to read arbitrary files by pressing "EXIT, Down, Down, 2" on an RF4CE remote to reach the diagnostic display, and then launching a Remote Web Inspector script.
local
low complexity
motorola CWE-200
2.1
2017-07-31 CVE-2017-9498 Improper Validation of Integrity Check Value vulnerability in multiple products
The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access.
local
low complexity
motorola comcast CWE-354
2.1
2009-02-03 CVE-2009-0393 Cross-Site Scripting vulnerability in Motorola Cpei300
Cross-site scripting (XSS) vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated users to inject arbitrary web script or HTML via the page parameter.
network
motorola CWE-79
3.5
2007-01-26 CVE-2007-0522 Improper Input Validation vulnerability in Motorola Motorazr V3
The Motorola MOTORAZR V3 phone allows remote attackers to cause a denial of service (continual modal dialogs and UI unavailability) by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push.
low complexity
motorola CWE-20
3.3