Format String Vulnerability in Motorola CX2 and M2 Routers
CVE-2019-12297

9.8CRITICAL

Key Information:

Vendor

Motorola

Status
Cx2 Firmware
Vendor
CVE Published:
23 May 2019

What is CVE-2019-12297?

A format string vulnerability exists in scopd on certain Motorola routers, specifically the CX2 and M2 models. This issue allows an attacker to exploit the router via TCP port 8010 or UDP port 8080. By manipulating the format string, an attacker can potentially execute arbitrary code or gain unauthorized access to sensitive data on the affected devices.

References

https://github.com/TeamSeri0us/pocs/blob/master/iot/morou...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.