PT-2019-12238
CVE-2019-11322
·
تاريخ النشر
2019-04-18
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Motorola CX2 version 1.01
Motorola M2 version 1.01
Description
An issue was discovered that leads to remote code execution via shell metacharacters in a JSON value. This is due to a command injection in the
startRmtAssist function in hnap.Recommendations
For Motorola CX2 version 1.01, consider disabling the
startRmtAssist function in hnap to prevent command injection until a patch is available.
For Motorola M2 version 1.01, consider disabling the startRmtAssist function in hnap to prevent command injection until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾