CVE-2019-11321

An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to obtain information such as the MAC addresses of connected client devices.
References
Link Resource
https://github.com/TeamSeri0us/pocs/blob/master/iot/motorola.pdf Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:motorola:cx2_firmware:1.01:*:*:*:*:*:*:*
cpe:2.3:h:motorola:cx2:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:motorola:m2_firmware:1.01:*:*:*:*:*:*:*
cpe:2.3:h:motorola:m2:-:*:*:*:*:*:*:*

Information

Published : 2019-04-18 10:29

Updated : 2020-08-24 10:37


NVD link : CVE-2019-11321

Mitre link : CVE-2019-11321


JSON object : View

CWE
CWE-306

Missing Authentication for Critical Function

Advertisement

dedicated server usa

Products Affected

motorola

  • m2
  • cx2_firmware
  • m2_firmware
  • cx2