Read the docs
TI-2025-01462 Aliases CVE-2025-1700GHSA-5w92-73jc-m2vr

Uncontrolled search path in Motorola Software Fix

Priority LOW 32CWE-427Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Active
Attack complexity
Low
Attack requirements
Present
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-427.

Summary

A DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart Assistant) installer that could allow a local attacker to escalate privileges during installation of the software.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00169 6th percentileScored 2026-11-07
Fix Fixed Software Fix (Motorola): 7.3.4.13

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MotorolaSoftware Fixbefore 7.3.4.137.3.4.13Patch availableCNA
  • Software Fix VendorMotorola Affected before 7.3.4.13 Fixed in 7.3.4.13 Patch available CNA

Remediation

  • Fix · CNA Software Fix (Motorola) Fixed in 7.3.4.13

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-1700
  2. 2026-10-03 Alias added: GHSA-5w92-73jc-m2vr

References

Other 2

  • TI-2013-02292 Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel… KEVCVSS 3.1HIGH 7.8
  • TI-2021-02526 OS command injection in Motorola Binatone Hubble Cameras CVSS 3.1HIGH 8.8
  • TI-2009-01326 Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote… CVSS 2.0HIGH 9.3
  • TI-2023-22228 An improper absolute path traversal vulnerability was reported for the Ready For… CVSS 3.1MEDIUM 6.5
  • TI-2007-04086 Multiple buffer overflows in Motorola Timbuktu Pro before 8.6.5 for Windows allow remote… CVSS 2.0HIGH 10.0
  • TI-2024-15650 Motorola MR2600 Authentication Bypass Vulnerability CVSS 3.1CRITICAL 9.6
See all 125 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences