PT-2019-12238
CVE-2019-11322
·
Publicado
2019-04-18
·
Atualizado
2020-08-24
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Motorola CX2 version 1.01
Motorola M2 version 1.01
Description
An issue was discovered that leads to remote code execution via shell metacharacters in a JSON value. This is due to a command injection in the
startRmtAssist function in hnap.Recommendations
For Motorola CX2 version 1.01, consider disabling the
startRmtAssist function in hnap to prevent command injection until a patch is available.
For Motorola M2 version 1.01, consider disabling the startRmtAssist function in hnap to prevent command injection until a patch is available.Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾