CVEvulnerability
CVE-2019-11321
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-04-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-306
Description
An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to obtain information such as the MAC addresses of connected client devices.
Affected configurations
• motorola cx2 firmware 1.01
• motorola m2 firmware 1.01
Related
Weakness · CWE (1)
- CWE-306 Missing Authentication for Critical Functionality weakness
References
- https://github.com/TeamSeri0us/pocs/blob/master/iot/motorola.pdf Exploit, Third Party Advisory
- https://github.com/TeamSeri0us/pocs/blob/master/iot/motorola.pdf Exploit, Third Party Advisory