An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to obtain information such as the MAC addresses of connected client devices.
References
Link | Resource |
---|---|
https://github.com/TeamSeri0us/pocs/blob/master/iot/motorola.pdf | Exploit Third Party Advisory |
Information
Published : 2019-04-18 10:29
Updated : 2020-08-24 10:37
NVD link : CVE-2019-11321
Mitre link : CVE-2019-11321
JSON object : View
CWE
CWE-306
Missing Authentication for Critical Function
Products Affected
motorola
- m2
- cx2_firmware
- m2_firmware
- cx2