Format String Vulnerability in Motorola CX2 and M2 Routers
CVE-2019-12297
9.8CRITICAL
Summary
A format string vulnerability exists in scopd on certain Motorola routers, specifically the CX2 and M2 models. This issue allows an attacker to exploit the router via TCP port 8010 or UDP port 8080. By manipulating the format string, an attacker can potentially execute arbitrary code or gain unauthorized access to sensitive data on the affected devices.
References
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved