Vulnerabilities

TI-2022-10172 CVE-2022-26941 · GHSA-6r76-9f7g-6w9v

Format string vulnerability in AT+CTGL command in Motorola MTM5000

MEDIUM 43

A format string vulnerability exists in Motorola MTM5000 series firmware AT command handler for the AT+CTGL command.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.00369 Published 2023-10-19 No fix listed CWE-134

TI-2022-10173 CVE-2022-26942 · GHSA-w833-px7j-q64c

LOW 37

The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment (TEE) modules.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00208 Published 2023-10-19 No fix listed CWE-822

TI-2022-10696 CVE-2022-27813 · GHSA-m8m2-8cm8-p8jv

LOW 35

Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00192 Published 2023-10-19 No fix listed CWE-1260

TI-2022-10174 CVE-2022-26943 · GHSA-cj2w-wj5h-c44x

MEDIUM 40

The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00357 Published 2023-10-19 No fix listed CWE-338