Unauthorized Access to API Functions via Authentication Bypass Vulnerability
CVE-2022-4001

7.3HIGH

Key Information:

Vendor
Motorola
Status
Q14 Mesh Router Firmware
Vendor
CVE Published:
31 July 2024

Summary

An authentication bypass vulnerability allows unauthorized users to access API functions in the affected Motorola Q14 Mesh Router without proper authentication. This flaw can lead to a range of security issues as it enables attackers to exploit API functionalities that should remain protected. Proper safeguards and updates are necessary to mitigate this security concern.

Affected Version(s)

Q14 Mesh Router Firmware 0 < 1.5.0.16

References

https://en-us.support.motorola.com/app/answers/detail/a_i...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.