Unauthorized Access to API Functions via Authentication Bypass Vulnerability
CVE-2022-4001

7.3HIGH

Key Information:

Vendor

Motorola

Vendor
CVE Published:
31 July 2024

What is CVE-2022-4001?

An authentication bypass vulnerability allows unauthorized users to access API functions in the affected Motorola Q14 Mesh Router without proper authentication. This flaw can lead to a range of security issues as it enables attackers to exploit API functionalities that should remain protected. Proper safeguards and updates are necessary to mitigate this security concern.

Affected Version(s)

Q14 Mesh Router Firmware 0 < 1.5.0.16

References

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.