PT-2019-12235
CVE-2019-11319
·
تاريخ النشر
2019-04-18
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Motorola CX2 version 1.01
Motorola M2 version 1.01
Description
A command injection issue in the
downloadFirmware function within the hnap module allows for remote code execution. This is achieved by using shell metacharacters in a JSON value.Recommendations
For Motorola CX2 version 1.01, consider disabling the
downloadFirmware function in hnap until a patch is available.
For Motorola M2 version 1.01, restrict access to the hnap module to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾