Vendor
Motorola
58 known vulnerabilities.
Products
15 results · Clear filters · Feed
-
High 7.5
The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps. When paired with a phishing attack…
-
High 8.4
An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit). …
-
High 7.0
A DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart Assistant) installer that cou…
-
High 7.3
An authentication bypass vulnerability could allow an attacker to access API functions without authentication.
-
High 7.2
A command injection vulnerability could allow an authenticated user to execute operating system commands as root via a …
-
High 8.2
Multiple missing pointer validation checks in trusted execution module in Motorola MTM5000
The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment (TEE) modules. Two modules are used, one responsible for KVL key management and the other for TETRA cryptographic functionality. In both modules…
-
High 8.1
Unconfigured memory protection modules in Motorola MTM5000
Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores. The SoC provides two memory protection units, MPU1 and MPU2, to enforce the trust boundary between the two cores. Since both …
-
High 8.8
Weak PRNG entropy source used for authentication challenge generation in Motorola MTM5000
The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source. Low boottime entropy and limited re-seeding of the pool renders the authentication challenge vulnerable to two …
-
High 8.4
Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller expo…
-
High 7.2
Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic si…
-
High 7.2
Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryp…
-
High 8.4
Motorola MBTS Base Radio accepts hard-coded backdoor password. The Motorola MBTS Base Radio Man Machine Interface (MMI)…
-
High 7.2
An improper input sanitization vulnerability in the Motorola MR2600 router could allow a local user with elevated permi…
-
High 8.8
An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras th…
-
High 8.1
The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communica…