PT-2019-12235
CVE-2019-11319
·
Publicado
2019-04-18
·
Atualizado
2020-08-24
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Motorola CX2 version 1.01
Motorola M2 version 1.01
Description
A command injection issue in the
downloadFirmware function within the hnap module allows for remote code execution. This is achieved by using shell metacharacters in a JSON value.Recommendations
For Motorola CX2 version 1.01, consider disabling the
downloadFirmware function in hnap until a patch is available.
For Motorola M2 version 1.01, restrict access to the hnap module to minimize the risk of exploitation.Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾