An issue was discovered in Motorola CX2 1.01 and M2 1.01.
Priority LOW 27CWE-306Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-306.
Summary
An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to obtain information such as the MAC addresses of connected client devices.
Why it matters now
EPSS 0.01329 71st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:motorola:cx2_firmware:1.01:*:*:*:*:*:*:* | 1.01 | Vulnerable | Motorola |
| cpe:2.3:h:motorola:cx2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Motorola |
| cpe:2.3:o:motorola:m2_firmware:1.01:*:*:*:*:*:*:* | 1.01 | Vulnerable | Motorola |
| cpe:2.3:h:motorola:m2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Motorola |
- cpe:2.3:o:motorola:cx2_firmware:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·Motorola
- cpe:2.3:h:motorola:cx2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Motorola
- cpe:2.3:o:motorola:m2_firmware:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·Motorola
- cpe:2.3:h:motorola:m2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Motorola
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-11321
- 2026-10-03 Alias added: GHSA-pq2h-hxv7-w669
References
More Motorola Cx2 Firmware vulnerabilities
- TI-2020-14210 An command injection vulnerability in HNAP1/SetWLanApcliSettings of Motorola CX2 router… CVSS 3.1CRITICAL 9.8
- TI-2020-14208 A command injection vulnerability in HNAP1/GetNetworkTomographySettings of Motorola CX2… CVSS 3.1CRITICAL 9.8
- TI-2019-08456 An issue was discovered in Motorola CX2 1.01 and M2 1.01. CVSS 3.0CRITICAL 9.8
- TI-2019-08453 An issue was discovered in Motorola CX2 1.01 and M2 1.01. CVSS 3.0CRITICAL 9.8
- TI-2019-09173 An issue was discovered in scopd on Motorola routers CX2 1.01 and M2 1.01. CVSS 3.0CRITICAL 9.8
- TI-2019-08454 In Motorola CX2 1.01 and M2 1.01, users can access the router's /priv_mgt.html web page… CVSS 3.0CRITICAL 9.8
Sources
- CVE-2019-11321 · CVE Program
- CVE-2019-11321 · NVD
- FIRST EPSS
- GHSA-pq2h-hxv7-w669 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences