Motorola vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-18058 The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps.High 7.3 · Sep 2, 2026
• CVE-2026-5804 An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit).High 8.4 · May 19, 2026
• CVE-2025-1700 A DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart Assistant) installer that could allow a local attacker to escalate priHigh 7.1 · Jul 17, 2025
• CVE-2024-45880 A command injection vulnerability exists in Motorola CX2L router v1.0.2 and below.High 8 · Oct 8, 2024
• CVE-2022-4002 A command injection vulnerability could allow an authenticated user to execute operating system commands as root via a specially crafted API request.High 7.2 · Jul 31, 2024
• CVE-2022-4001 An authentication bypass vulnerability could allow an attacker to access API functions without authentication.High 7.3 · Jul 31, 2024
• CVE-2024-23630 An arbitrary firmware upload vulnerability exists in the Motorola MR2600.Critical 9 · Jan 25, 2024
• CVE-2024-23629 An authentication bypass vulnerability exists in the web component of the Motorola MR2600.Critical 9.6 · Jan 25, 2024
• CVE-2024-23628 A command injection vulnerability exists in the 'SaveStaticRouteIPv6Params' parameter of the Motorola MR2600.Critical 9 · Jan 25, 2024
• CVE-2024-23627 A command injection vulnerability exists in the 'SaveStaticRouteIPv4Params' parameter of the Motorola MR2600.Critical 9 · Jan 25, 2024
• CVE-2024-23626 A command injection vulnerability exists in the ‘SaveSysLogParams’ parameter of the Motorola MR2600.Critical 9 · Jan 25, 2024
• CVE-2022-27813 Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores.High 8.1 · Oct 19, 2023
• CVE-2022-26943 The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source.High 8.8 · Oct 19, 2023
• CVE-2022-26942 The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment (TEE) modules.High 8.2 · Oct 19, 2023
• CVE-2022-26941 A format string vulnerability exists in Motorola MTM5000 series firmware AT command handler for the AT+CTGL command.Critical 9.6 · Oct 19, 2023
• CVE-2023-23774 Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception.High 8.4 · Aug 29, 2023
• CVE-2023-23773 Motorola EBTS/MBTS Base Radio fails to check firmware authenticity.High 7.2 · Aug 29, 2023
• CVE-2023-23772 Motorola MBTS Site Controller fails to check firmware update authenticity.High 7.2 · Aug 29, 2023
• CVE-2023-23771 Motorola MBTS Base Radio accepts hard-coded backdoor password.High 8.4 · Aug 29, 2023
• CVE-2023-23770 Motorola MBTS Site Controller accepts hard-coded backdoor password.Critical 9.4 · Aug 29, 2023
• CVE-2023-31531 Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the tomography_ping_number parameter.High 8.8 · May 11, 2023
• CVE-2023-31530 Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the smartqos_priority_devices parameter.High 8.8 · May 11, 2023
• CVE-2023-31529 Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the system_time_timezone parameter.High 8.8 · May 11, 2023
• CVE-2023-31528 Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the staticroute_list parameter.High 8.8 · May 11, 2023
• CVE-2022-34885 An improper input sanitization vulnerability in the Motorola MR2600 router could allow a local user with elevated permissions to execute arbitrary code.High 7.2 · Jan 30, 2023