CVE-2019-11322: OS Command Injection
Published Apr 18, 2019
·Updated
An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value.
Affected Software
4 affected components
Motorola Cx2 Firmware=1.01
Motorola CX2
Motorola M2 Firmware=1.01
Motorola M2
Event History
Apr 18, 2019
CVE Published
via MITRE·04:47 PM
Data Sourced
via MITRE·04:47 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-11322?
The severity of CVE-2019-11322 is critical with a severity value of 9.8.
2
What is the affected software of CVE-2019-11322?
The affected software of CVE-2019-11322 is Motorola CX2 Firmware version 1.01 and Motorola M2 Firmware version 1.01.
3
How does CVE-2019-11322 impact the affected software?
CVE-2019-11322 allows for remote code execution via shell metacharacters in a JSON value, leading to command injection.
4
Is Motorola CX2 vulnerable to CVE-2019-11322?
No, Motorola CX2 is not vulnerable to CVE-2019-11322.
5
Is Motorola M2 vulnerable to CVE-2019-11322?
No, Motorola M2 is not vulnerable to CVE-2019-11322.