Vendor
Motorola
58 known vulnerabilities.
Motorola at a glance
- Last 12 months
- 3
- Critical · all time
- 7
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 1 | 0 |
| Sep 2026 | 1 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 1 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 2 | 0 |
| Jun 2025 | 2 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Products
Latest advisories
-
Highfirst Sep 19, 2015
58 results · Feed
-
Medium 4.4
A component of one of the Motorola system applications was exported without permission, allowing for the revocation of …
-
High 7.5
The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps. When paired with a phishing attack…
-
High 8.4
An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit). …
-
Low 3.5
A vulnerability was reported in version 1.0 of the Bluetooth Transmission Alliance protocol adopted by Motorola Smart C…
-
High 7.0
A DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart Assistant) installer that cou…
-
Low 2.8
An incorrect default permissions vulnerability was reported in the MotoSignature application that could result in unaut…
-
Low 2.8
Null pointer exception vulnerabilities were reported in the fingerprint sensor service that could allow a local attacke…
-
High 7.3
An authentication bypass vulnerability could allow an attacker to access API functions without authentication.
-
High 7.2
A command injection vulnerability could allow an authenticated user to execute operating system commands as root via a …
-
Low 2.7
A denial-of-service vulnerability could allow an authenticated user to trigger an internal service restart via a specia…
-
Low 2.8
An Implicit intent vulnerability was reported in the Motorola framework that could allow an attacker to read telephony-…
-
Low 2.8
An improper export vulnerability was reported in the Motorola Enterprise MotoDpms Provider (com.motorola.server.enterpr…
-
Medium 6.3
A hard-coded AES key vulnerability was reported in the Motorola GuideMe application, along with a lack of URI sanitatio…
-
Medium 5.5
An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local a…
-
Medium 6.5
An improper absolute path traversal vulnerability was reported for the Ready For application allowing a local applicati…
-
Medium 4.4
An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized a…
-
Medium 5.1
A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to…
-
Low 2.8
A path traversal vulnerability was reported in the Motorola Ready For application that could allow a local attacker to …
-
Low 2.8
An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker…
-
Medium 4.4
An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local att…
-
Medium 4.8
An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malici…
-
Medium 5.0
A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to …
-
Medium 5.0
An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker t…
-
Medium 6.1
A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local a…
-
Medium 5.0
An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application th…
-
Low 2.8
An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker…
-
Medium 5.0
An improper export vulnerability was reported in the Motorola Services Main application that could allow a local attack…
-
Medium 5.0
An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious…
-
Medium 5.1
An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, loc…
-
Critical 9.0
Motorola MR2600 Arbitrary Firmware Upload Vulnerability
An arbitrary firmware upload vulnerability exists in the Motorola MR2600. An attacker can exploit this vulnerability to achieve code execution on the device. Authentication is required, however can be bypassed.
-
Critical 9.6
Motorola MR2600 Authentication Bypass Vulnerability
An authentication bypass vulnerability exists in the web component of the Motorola MR2600. An attacker can exploit this vulnerability to access protected URLs and retrieve sensitive information.
-
Critical 9.0
Motorola MR2600 SaveStaticRouteIPv6Params Command Injection Vulnerability
A command injection vulnerability exists in the 'SaveStaticRouteIPv6Params' parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability to achieve command execution. Authentication is required, however can be bypassed.
-
Critical 9.0
Motorola MR2600 SaveStaticRouteIPv4Params Command Injection Vulnerability
A command injection vulnerability exists in the 'SaveStaticRouteIPv4Params' parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability to achieve command execution. Authentication is required, however can be bypassed.
-
Critical 9.0
Motorola MR2600 SaveSysLogParams Command Injection Vulnerability
A command injection vulnerability exists in the ‘SaveSysLogParams’ parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability to achieve command execution. Authentication is required, however can be bypassed.
-
Medium 6.5
A vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an attacker within range …
-
Critical 9.6
Format string vulnerability in AT+CTGL command in Motorola MTM5000
A format string vulnerability exists in Motorola MTM5000 series firmware AT command handler for the AT+CTGL command. An attacker-controllable string is improperly handled, allowing for a write-anything-anywhere scenario. This can be leveraged to obtain arbitr…
-
High 8.2
Multiple missing pointer validation checks in trusted execution module in Motorola MTM5000
The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment (TEE) modules. Two modules are used, one responsible for KVL key management and the other for TETRA cryptographic functionality. In both modules…
-
High 8.1
Unconfigured memory protection modules in Motorola MTM5000
Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores. The SoC provides two memory protection units, MPU1 and MPU2, to enforce the trust boundary between the two cores. Since both …
-
High 8.8
Weak PRNG entropy source used for authentication challenge generation in Motorola MTM5000
The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source. Low boottime entropy and limited re-seeding of the pool renders the authentication challenge vulnerable to two …
-
High 8.4
Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller expo…