Authentication Bypass Vulnerability in Motorola CX2 Router
CVE-2020-21932

5.3MEDIUM

Key Information:

Vendor

Motorola

Status
Cx2 Firmware
Vendor
CVE Published:
21 July 2021

What is CVE-2020-21932?

An authentication bypass vulnerability exists in the login interface of the Motorola CX2 router. This flaw can be exploited by an attacker to bypass the login mechanism, enabling unauthorized access to the device. By obtaining a partially authorized token and user ID (uid), attackers can gain limited access to the router's functionalities, potentially jeopardizing the security and integrity of the network it operates within.

References

https://github.com/cc-crack/router/blob/master/motocx2.md
x_refsource_MISC
https://l0n0l.xyz/post/motocx2/
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.