Motorola
91 CVEs across 127 Motorola products. Browse Motorola vulnerabilities, severities, and proof-of-concept exploits.
Motorola products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-5804 | High | 8.4 | 2026-05-19 | An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit). The application contained a reference to… |
CVE-2025-2818 | Low | 3.5 | 2025-07-17 | A vulnerability was reported in version 1.0 of the Bluetooth Transmission Alliance protocol adopted by Motorola Smart Connect Android Application that could al… |
CVE-2025-1700 | High | 7.0 | 2025-07-17 | A DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart Assistant) installer that could allow a local attacker to escalate pr… |
CVE-2025-1699 | Low | 2.8 | 2025-06-11 | An incorrect default permissions vulnerability was reported in the MotoSignature application that could result in unauthorized access. |
CVE-2025-1698 | Low | 2.8 | 2025-06-11 | Null pointer exception vulnerabilities were reported in the fingerprint sensor service that could allow a local attacker to cause a denial of service. |
CVE-2022-4003 | Low | 2.7 | 2024-07-31 | A denial-of-service vulnerability could allow an authenticated user to trigger an internal service restart via a specially crafted API request. |
CVE-2022-4002 | High | 7.2 | 2024-07-31 | A command injection vulnerability could allow an authenticated user to execute operating system commands as root via a specially crafted API request. |
CVE-2022-4001 | High | 7.3 | 2024-07-31 | An authentication bypass vulnerability could allow an attacker to access API functions without authentication. |
CVE-2024-38281 | Critical | 9.8 | 2024-06-13 | An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device. |
CVE-2024-38280 | Medium | 4.6 | 2024-06-13 | An unauthorized user is able to gain access to sensitive data, including credentials, by physically retrieving the hard disk of the product as the data is stor… |
CVE-2024-38279 | Medium | 4.6 | 2024-06-13 | The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the file syste… |
CVE-2024-3480 | Low | 2.8 | 2024-05-03 | An Implicit intent vulnerability was reported in the Motorola framework that could allow an attacker to read telephony-related data. |
CVE-2024-3479 | Low | 2.8 | 2024-05-03 | An improper export vulnerability was reported in the Motorola Enterprise MotoDpms Provider (com.motorola.server.enterprise.MotoDpmsProvider) that could allow… |
CVE-2024-3109 | Medium | 6.3 | 2024-05-03 | A hard-coded AES key vulnerability was reported in the Motorola GuideMe application, along with a lack of URI sanitation, could allow for a local attacker to… |
CVE-2024-3108 | Medium | 5.5 | 2024-05-03 | An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquire the location of t… |
CVE-2023-41830 | Medium | 6.5 | 2024-05-03 | An improper absolute path traversal vulnerability was reported for the Ready For application allowing a local application access to files without authorizatio… |
CVE-2023-41828 | Medium | 4.4 | 2024-05-03 | An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provide… |
CVE-2023-41826 | Medium | 5.1 | 2024-05-03 | A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or interact with non-expor… |
CVE-2023-41825 | Low | 2.8 | 2024-05-03 | A path traversal vulnerability was reported in the Motorola Ready For application that could allow a local attacker to access local files. |
CVE-2023-41824 | Low | 2.8 | 2024-05-03 | An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and c… |
CVE-2023-41823 | Medium | 4.4 | 2024-05-03 | An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauthorized Activitie… |
CVE-2023-41822 | Medium | 4.8 | 2024-05-03 | An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malicious local application to execute OS com… |
CVE-2023-41821 | Medium | 5.0 | 2024-05-03 | A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to read sensitive user information. |
CVE-2023-41820 | Medium | 5.0 | 2024-05-03 | An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Blue… |
CVE-2023-41819 | Medium | 6.1 | 2024-05-03 | A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local attacker to access unauthorized content… |
CVE-2023-41818 | Medium | 5.0 | 2024-05-03 | An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a local attacker to read… |
CVE-2023-41817 | Low | 2.8 | 2024-05-03 | An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read unauthorized information. |
CVE-2023-41816 | Medium | 5.0 | 2024-05-03 | An improper export vulnerability was reported in the Motorola Services Main application that could allow a local attacker to write to a local database. |
CVE-2023-41829 | Medium | 5.0 | 2024-03-04 | An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application to read files withou… |
CVE-2023-41827 | Medium | 5.1 | 2024-03-04 | An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based m… |
CVE-2024-25360 | Medium | 5.3 | 2024-02-12 | A hidden interface in Motorola CX2L Router firmware v1.0.1 leaks information regarding the SystemWizardStatus component via sending a crafted request to device… |
CVE-2024-23630 | Critical | 9.0 | 2024-01-26 | An arbitrary firmware upload vulnerability exists in the Motorola MR2600. An attacker can exploit this vulnerability to achieve code execution on the device… |
CVE-2024-23629 | Critical | 9.6 | 2024-01-26 | An authentication bypass vulnerability exists in the web component of the Motorola MR2600. An attacker can exploit this vulnerability to access protected URLs… |
CVE-2024-23628 | Critical | 9.0 | 2024-01-26 | A command injection vulnerability exists in the 'SaveStaticRouteIPv6Params' parameter of the Motorola MR2600. A remote attacker can exploit this vulnerabilit… |
CVE-2024-23627 | Critical | 9.0 | 2024-01-26 | A command injection vulnerability exists in the 'SaveStaticRouteIPv4Params' parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability… |
CVE-2024-23626 | Critical | 9.0 | 2024-01-26 | A command injection vulnerability exists in the ‘SaveSysLogParams’ parameter of the Motorola MR2600. A remote attacker can exploit this vulnerability to achi… |
CVE-2022-3681 | Medium | 6.5 | 2023-10-27 | A vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an attacker within range of the wireless network to successfully… |
CVE-2022-27813 | High | 8.1 | 2023-10-19 | Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores. The SoC provides two memo… |
CVE-2022-26943 | High | 8.8 | 2023-10-19 | The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source. Low boottim… |
CVE-2022-26942 | High | 8.2 | 2023-10-19 | The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment (TEE) modules. Two modules are used, one res… |
CVE-2022-26941 | Critical | 9.6 | 2023-10-19 | A format string vulnerability exists in Motorola MTM5000 series firmware AT command handler for the AT+CTGL command. An attacker-controllable string is imprope… |
CVE-2022-3407 | Medium | 4.9 | 2023-09-01 | I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a… |
CVE-2023-23774 | High | 8.4 | 2023-08-29 | Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller exposes a debug prompt on the device's seria… |
CVE-2023-23773 | High | 7.2 | 2023-08-29 | Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update p… |
CVE-2023-23772 | High | 7.2 | 2023-08-29 | Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmw… |
CVE-2023-23771 | High | 8.4 | 2023-08-29 | Motorola MBTS Base Radio accepts hard-coded backdoor password. The Motorola MBTS Base Radio Man Machine Interface (MMI), allowing for service technicians to di… |
CVE-2023-23770 | Critical | 9.4 | 2023-08-29 | Motorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site Controller Man Machine Interface (MMI), allowing for service technic… |
CVE-2023-31531 | High | 8.8 | 2023-05-11 | Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the tomography_ping_number parameter. |
CVE-2023-31530 | High | 8.8 | 2023-05-11 | Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the smartqos_priority_devices parameter. |
CVE-2023-31529 | High | 8.8 | 2023-05-11 | Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the system_time_timezone parameter. |
CVE-2023-31528 | High | 8.8 | 2023-05-11 | Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the staticroute_list parameter. |
CVE-2022-34885 | High | 7.2 | 2023-01-30 | An improper input sanitization vulnerability in the Motorola MR2600 router could allow a local user with elevated permissions to execute arbitrary code. |
CVE-2022-3917 | Medium | 4.6 | 2022-12-14 | Improper access control of bootloader function was discovered in Motorola Mobility Motorola e20 prior to version RONS31.267-38-8 allows attacker with local acc… |
CVE-2022-30276 | High | 7.5 | 2022-07-26 | The Motorola MOSCAD and ACE line of RTUs through 2022-05-02 omit an authentication requirement. They feature IP Gateway modules which allow for interfacing bet… |
CVE-2022-30274 | Critical | 9.8 | 2022-07-26 | The Motorola ACE1000 RTU through 2022-05-02 uses ECB encryption unsafely. It can communicate with an XRT LAN-to-radio gateway by means of an embedded client. C… |
CVE-2022-30272 | High | 7.2 | 2022-07-26 | The Motorola ACE1000 RTU through 2022-05-02 mishandles firmware integrity. It utilizes either the STS software suite or ACE1000 Easy Configurator for performin… |
CVE-2022-30271 | Critical | 9.8 | 2022-07-26 | The Motorola ACE1000 RTU through 2022-05-02 ships with a hardcoded SSH private key and initialization scripts (such as /etc/init.d/sshd_service) only generate… |
CVE-2022-30270 | Critical | 9.8 | 2022-07-26 | The Motorola ACE1000 RTU through 2022-05-02 has default credentials. It exposes an SSH interface on port 22/TCP. This interface is used for remote maintenance… |
CVE-2022-30269 | High | 8.8 | 2022-07-26 | Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom application installation via either STS software, the C toolkit… |
CVE-2021-3898 | Medium | 6.8 | 2022-04-22 | Versions of Motorola Ready For and Motorola Device Help Android applications prior to 2021-04-08 do not properly verify the server certificate which could lead… |
CVE-2021-38701 | Medium | 4.8 | 2021-12-15 | Certain Motorola Solutions Avigilon devices allow XSS in the administrative UI. This affects T200/201 before 4.10.0.68; T290 before 4.4.0.80; T008 before 2.2.0… |
CVE-2021-3793 | Medium | 6.5 | 2021-11-12 | An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow an unauthenticated attacker on the sam… |
CVE-2021-3792 | Medium | 5.3 | 2021-11-12 | Some device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encrypted which could lead to the communicatio… |
CVE-2021-3791 | Medium | 6.5 | 2021-11-12 | An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same… |
CVE-2021-3790 | Medium | 6.5 | 2021-11-12 | A buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the sam… |
CVE-2021-3789 | Medium | 4.2 | 2021-11-12 | An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access to obta… |
CVE-2021-3788 | Medium | 6.8 | 2021-11-12 | An exposed debug interface was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access unauthorized access… |
CVE-2021-3787 | Medium | 6.4 | 2021-11-12 | A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local access to obtain the MQTT credentials tha… |
CVE-2021-3577 | High | 8.8 | 2021-11-12 | An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker on the same n… |
CVE-2021-3459 | Medium | 6.8 | 2021-08-17 | A privilege escalation vulnerability was reported in the MM1000 device configuration web server, which could allow privileged shell access and/or arbitrary pri… |
CVE-2021-3458 | Medium | 6.1 | 2021-08-17 | The Motorola MM1000 device configuration portal can be accessed without authentication, which could allow adapter settings to be modified. |
CVE-2020-21937 | Critical | 9.8 | 2021-07-21 | An command injection vulnerability in HNAP1/SetWLanApcliSettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrar… |
CVE-2020-21936 | Medium | 5.3 | 2021-07-21 | An issue in HNAP1/GetMultipleHNAPs of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to access the components GetStationSettings, GetW… |
CVE-2020-21935 | Critical | 9.8 | 2021-07-21 | A command injection vulnerability in HNAP1/GetNetworkTomographySettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute a… |
CVE-2020-21934 | High | 7.5 | 2021-07-21 | An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where authentication to download the Syslog could be bypassed. |
CVE-2020-21933 | High | 7.5 | 2021-07-21 | An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where the admin password and private key could be found in the log tar packag… |
CVE-2020-21932 | Medium | 5.3 | 2021-07-21 | A vulnerability in /Login.html of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to bypass login and obtain a partially authorized tok… |
CVE-2021-3460 | High | 8.1 | 2021-04-13 | The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communication with the support server which could… |
CVE-2020-10874 | High | 7.5 | 2020-03-23 | Motorola FX9500 devices allow remote attackers to read database files. |
CVE-2019-16257 | Critical | 9.8 | 2019-09-12 | Some Motorola devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI i… |
CVE-2019-15513 | High | 7.5 | 2019-08-23 | An issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) before 15.05.1 as used on Motorola CX2L MWR04L 1.01 and C1 MWR0… |
CVE-2019-13129 | High | 7.5 | 2019-07-01 | On the Motorola router CX2L MWR04L 1.01, there is a stack consumption (infinite recursion) issue in scopd via TCP port 8010 and UDP port 8080. It is caused by… |
CVE-2019-12297 | Critical | 9.8 | 2019-05-23 | An issue was discovered in scopd on Motorola routers CX2 1.01 and M2 1.01. There is a Use of an Externally Controlled Format String, reachable via TCP port 801… |
CVE-2019-11322 | Critical | 9.8 | 2019-04-18 | An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execu… |
CVE-2019-11321 | Medium | 5.3 | 2019-04-18 | An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to o… |
CVE-2019-11320 | Critical | 9.8 | 2019-04-18 | In Motorola CX2 1.01 and M2 1.01, users can access the router's /priv_mgt.html web page to launch telnetd, as demonstrated by the 192.168.51.1 address. |
CVE-2019-11319 | Critical | 9.8 | 2019-04-18 | An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function downloadFirmware in hnap, which leads to remote code exe… |
CVE-2019-9121 | Critical | 9.8 | 2019-03-07 | An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to… |
CVE-2019-9120 | Critical | 9.8 | 2019-03-07 | An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to… |
CVE-2019-9119 | Critical | 9.8 | 2019-03-07 | An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to… |
CVE-2019-9118 | Critical | 9.8 | 2019-03-07 | An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to… |
CVE-2019-9117 | Critical | 9.8 | 2019-03-07 | An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to… |
CVE-2018-20399 | Critical | 9.8 | 2018-12-23 | Motorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and SVG1202 SVG1202-2.1.0.0-GA-14-LTSH devices allow remote attackers to… |
CVE-2018-12499 | High | 7.4 | 2018-07-02 | The Motorola MBP853 firmware does not correctly validate server certificates. This allows for a Man in The Middle (MiTM) attack to take place between a Motorol… |
CVE-2014-0997 | High | 7.5 | 2017-09-26 | WiFiMonitor in Android 4.4.4 as used in the Nexus 5 and 4, Android 4.2.2 as used in the LG D806, Android 4.2.2 as used in the Samsung SM-T310, Android 4.1.2 as… |
CVE-2017-9498 | Medium | 5.5 | 2017-07-31 | The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arb… |
CVE-2017-9497 | Medium | 6.8 | 2017-07-31 | The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to execute arbitrary comman… |
CVE-2017-9496 | Medium | 6.8 | 2017-07-31 | The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to access an SNMP server by… |
CVE-2017-9495 | Medium | 4.6 | 2017-07-31 | The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to read arbitrary files by… |
CVE-2017-9494 | Medium | 5.3 | 2017-07-31 | The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows remote attackers to enable a Remote Web Inspector that is… |