Incorrect default permissions in Motorola g34
Priority LOW 11CWE-276Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- Active
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
An incorrect default permissions vulnerability was reported in the MotoSignature application that could result in unauthorized access.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00129 2nd percentileScored 2026-11-07
Fix Fixed g34 (Motorola): 2025-06-01g34t (Motorola): 2025-06-01+1 more product
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
Remediation
- Fix · CNA g34 (Motorola) Fixed in 2025-06-01
- Fix · CNA g34t (Motorola) Fixed in 2025-06-01
- Fix · CNA g45 5G (Motorola) Fixed in 2025-06-01
Timeline
- 2026-10-02 Threatist record created from CVE-2025-1699
- 2026-10-03 Alias added: GHSA-8vrc-phw3-jc6v
References
More Motorola vulnerabilities
- TI-2013-02292 Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel… KEVCVSS 3.1HIGH 7.8
- TI-2021-02526 OS command injection in Motorola Binatone Hubble Cameras CVSS 3.1HIGH 8.8
- TI-2009-01326 Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote… CVSS 2.0HIGH 9.3
- TI-2023-22228 An improper absolute path traversal vulnerability was reported for the Ready For… CVSS 3.1MEDIUM 6.5
- TI-2007-04086 Multiple buffer overflows in Motorola Timbuktu Pro before 8.6.5 for Windows allow remote… CVSS 2.0HIGH 10.0
- TI-2024-15650 Motorola MR2600 Authentication Bypass Vulnerability CVSS 3.1CRITICAL 9.6
Sources
- CVE-2025-1699 · CVE Program
- CVE-2025-1699 · NVD
- FIRST EPSS
- GHSA-8vrc-phw3-jc6v · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences