PT-2019-12238
CVE-2019-11322
·
Published
2019-04-18
·
Updated
2020-08-24
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Motorola CX2 version 1.01
Motorola M2 version 1.01
Description
An issue was discovered that leads to remote code execution via shell metacharacters in a JSON value. This is due to a command injection in the
startRmtAssist function in hnap.Recommendations
For Motorola CX2 version 1.01, consider disabling the
startRmtAssist function in hnap to prevent command injection until a patch is available.
For Motorola M2 version 1.01, consider disabling the startRmtAssist function in hnap to prevent command injection until a patch is available. Found an issue in the description? Have something to add? Feel free to write us 👾