Critical severity · published Apr 18, 2019
CVE-2019-11322
An issue was discovered in Motorola CX2 1.01 and M2 1.01
9.8
CVSS
3.9%
EPSS
No
On KEV
Description
An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Cx2 Firmware · Motorola
1.01 · source: NVD
MF
M2 Firmware · Motorola
1.01 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-11322
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-11322
Exploit
https://github.com/TeamSeri0us/pocs/blob/master/iot/motorola.pdf
More from Cx2 Firmware
9.8
CVE-2020-21937
An command injection vulnerability in HNAP1/SetWLanApcliSettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary system commands
9.8
CVE-2020-21935
A command injection vulnerability in HNAP1/GetNetworkTomographySettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary code
9.8
CVE-2019-12297
An issue was discovered in scopd on Motorola routers CX2 1.01 and M2 1.01
9.8
CVE-2019-11320
In Motorola CX2 1.01 and M2 1.01, users can access the router's /priv_mgt.html web page to launch telnetd, as demonstrated by the 192.168.51.1 address
9.8
CVE-2019-11319
An issue was discovered in Motorola CX2 1.01 and M2 1.01