CVE-2019-11321

5.3 mediumEPSS 1.3%

Medium (5.3) in motorola. EPSS 1.3% chance of exploitation in the next 30 days.

An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to obtain information such as the MAC addresses of connected client devices.

Severity

CVSS 3.0

5.3 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2019-04-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

motorola:cx2_firmware
motorola:m2_firmware

References

https://github.com/TeamSeri0us/pocs/blob/master/iot/motorola.pdf
https://github.com/TeamSeri0us/pocs/blob/master/iot/motorola.pdf

Check your stack JSON