Medium severity · published Jul 21, 2021
CVE-2020-21936
An issue in HNAP1/GetMultipleHNAPs of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to access the components GetStationSettings, GetWebsiteFilterSettings…
5.3
CVSS
1.3%
EPSS
No
On KEV
Description
An issue in HNAP1/GetMultipleHNAPs of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to access the components GetStationSettings, GetWebsiteFilterSettings and GetNetworkSettings without authentication.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Cx2 Firmware · Motorola
1.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-21936
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-21936
Exploit
https://github.com/cc-crack/router/blob/master/motocx2.md
Exploit
https://l0n0l.xyz/post/motocx2/
More from Cx2 Firmware
9.8
CVE-2020-21937
An command injection vulnerability in HNAP1/SetWLanApcliSettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary system commands
9.8
CVE-2020-21935
A command injection vulnerability in HNAP1/GetNetworkTomographySettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary code
9.8
CVE-2019-12297
An issue was discovered in scopd on Motorola routers CX2 1.01 and M2 1.01
9.8
CVE-2019-11322
An issue was discovered in Motorola CX2 1.01 and M2 1.01
9.8
CVE-2019-11320
In Motorola CX2 1.01 and M2 1.01, users can access the router's /priv_mgt.html web page to launch telnetd, as demonstrated by the 192.168.51.1 address