# cve.now: Motorola

The newest entries naming Motorola as an affected vendor (up to 200), of 58 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-93832](https://cve.now/CVE-2026-93832.md): A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions f (CVSS 4.8)
- [CVE-2026-18058](https://cve.now/CVE-2026-18058.md): The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps. (CVSS 7.3)
- [CVE-2026-5804](https://cve.now/CVE-2026-5804.md): An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit). (CVSS 8.4)
- [CVE-2025-2818](https://cve.now/CVE-2025-2818.md): A vulnerability was reported in version 1.0 of the Bluetooth Transmission Alliance protocol adopted by Motorola Smart Connect Android Applic (CVSS 5.1)
- [CVE-2025-1700](https://cve.now/CVE-2025-1700.md): A DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart Assistant) installer that could allow a local atta (CVSS 7.1)
- [CVE-2025-1699](https://cve.now/CVE-2025-1699.md): An incorrect default permissions vulnerability was reported in the MotoSignature application that could result in unauthorized access. (CVSS 2.4)
- [CVE-2025-1698](https://cve.now/CVE-2025-1698.md): Null pointer exception vulnerabilities were reported in the fingerprint sensor service that could allow a local attacker to cause a denial o (CVSS 2.4)
- [CVE-2022-4001](https://cve.now/CVE-2022-4001.md): An authentication bypass vulnerability could allow an attacker to access API functions without authentication. (CVSS 7.3)
- [CVE-2022-4002](https://cve.now/CVE-2022-4002.md): A command injection vulnerability could allow an authenticated user to execute operating system commands as root via a specially crafted API (CVSS 7.2)
- [CVE-2022-4003](https://cve.now/CVE-2022-4003.md): A denial-of-service vulnerability could allow an authenticated user to trigger an internal service restart via a specially crafted API reque (CVSS 2.7)
- [CVE-2024-3480](https://cve.now/CVE-2024-3480.md): An Implicit intent vulnerability was reported in the Motorola framework that could allow an attacker to read telephony-related data. (CVSS 2.8)
- [CVE-2024-3479](https://cve.now/CVE-2024-3479.md): An improper export vulnerability was reported in the Motorola Enterprise MotoDpms Provider (com.motorola.server.enterprise.MotoDpmsProvider (CVSS 2.8)
- [CVE-2024-3109](https://cve.now/CVE-2024-3109.md): A hard-coded AES key vulnerability was reported in the Motorola GuideMe application, along with a lack of URI sanitation, could allow for a (CVSS 6.3)
- [CVE-2024-3108](https://cve.now/CVE-2024-3108.md): An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquir (CVSS 5.5)
- [CVE-2023-41830](https://cve.now/CVE-2023-41830.md): An improper absolute path traversal vulnerability was reported for the Ready For application allowing a local application access to files w (CVSS 6.5)
- [CVE-2023-41828](https://cve.now/CVE-2023-41828.md): An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-expor (CVSS 4.4)
- [CVE-2023-41826](https://cve.now/CVE-2023-41826.md): A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or inte (CVSS 5.1)
- [CVE-2023-41825](https://cve.now/CVE-2023-41825.md): A path traversal vulnerability was reported in the Motorola Ready For application that could allow a local attacker to access local files. (CVSS 2.8)
- [CVE-2023-41824](https://cve.now/CVE-2023-41824.md): An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling (CVSS 2.8)
- [CVE-2023-41823](https://cve.now/CVE-2023-41823.md): An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute una (CVSS 4.4)
- [CVE-2023-41822](https://cve.now/CVE-2023-41822.md): An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malicious local applicatio (CVSS 4.8)
- [CVE-2023-41821](https://cve.now/CVE-2023-41821.md): A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to read sensitive user (CVSS 5.0)
- [CVE-2023-41820](https://cve.now/CVE-2023-41820.md): An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information a (CVSS 5.0)
- [CVE-2023-41819](https://cve.now/CVE-2023-41819.md): A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local attacker to access un (CVSS 6.1)
- [CVE-2023-41818](https://cve.now/CVE-2023-41818.md): An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a loc (CVSS 5.0)
- [CVE-2023-41817](https://cve.now/CVE-2023-41817.md): An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read unauthorized (CVSS 2.8)
- [CVE-2023-41816](https://cve.now/CVE-2023-41816.md): An improper export vulnerability was reported in the Motorola Services Main application that could allow a local attacker to write to a loc (CVSS 5.0)
- [CVE-2023-41829](https://cve.now/CVE-2023-41829.md): An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application t (CVSS 5.0)
- [CVE-2023-41827](https://cve.now/CVE-2023-41827.md): An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inj (CVSS 5.1)
- [CVE-2024-23630](https://cve.now/CVE-2024-23630.md): Motorola MR2600 Arbitrary Firmware Upload Vulnerability (CVSS 9.0)
- [CVE-2024-23629](https://cve.now/CVE-2024-23629.md): Motorola MR2600 Authentication Bypass Vulnerability (CVSS 9.6)
- [CVE-2024-23628](https://cve.now/CVE-2024-23628.md): Motorola MR2600 SaveStaticRouteIPv6Params Command Injection Vulnerability (CVSS 9.0)
- [CVE-2024-23627](https://cve.now/CVE-2024-23627.md): Motorola MR2600 SaveStaticRouteIPv4Params Command Injection Vulnerability (CVSS 9.0)
- [CVE-2024-23626](https://cve.now/CVE-2024-23626.md): Motorola MR2600 SaveSysLogParams Command Injection Vulnerability (CVSS 9.0)
- [CVE-2022-3681](https://cve.now/CVE-2022-3681.md): A vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an attacker within range of the wireless netwo (CVSS 6.5)
- [CVE-2022-26941](https://cve.now/CVE-2022-26941.md): Format string vulnerability in AT+CTGL command in Motorola MTM5000 (CVSS 9.6)
- [CVE-2022-26942](https://cve.now/CVE-2022-26942.md): Multiple missing pointer validation checks in trusted execution module in Motorola MTM5000 (CVSS 8.2)
- [CVE-2022-27813](https://cve.now/CVE-2022-27813.md): Unconfigured memory protection modules in Motorola MTM5000 (CVSS 8.1)
- [CVE-2022-26943](https://cve.now/CVE-2022-26943.md): Weak PRNG entropy source used for authentication challenge generation in Motorola MTM5000 (CVSS 8.8)
- [CVE-2023-23774](https://cve.now/CVE-2023-23774.md): Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. (CVSS 8.4)
- [CVE-2023-23773](https://cve.now/CVE-2023-23773.md): Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. (CVSS 7.2)
- [CVE-2023-23772](https://cve.now/CVE-2023-23772.md): Motorola MBTS Site Controller fails to check firmware update authenticity. (CVSS 7.2)
- [CVE-2023-23771](https://cve.now/CVE-2023-23771.md): Motorola MBTS Base Radio accepts hard-coded backdoor password. (CVSS 8.4)
- [CVE-2023-23770](https://cve.now/CVE-2023-23770.md): Motorola MBTS Site Controller accepts hard-coded backdoor password. (CVSS 9.4)
- [CVE-2022-34885](https://cve.now/CVE-2022-34885.md): An improper input sanitization vulnerability in the Motorola MR2600 router could allow a local user with elevated permissions to execute arb (CVSS 7.2)
- [CVE-2022-3917](https://cve.now/CVE-2022-3917.md): Improper access control of bootloader function was discovered in Motorola Mobility Motorola e20 prior to version RONS31.267-38-8 allows atta (CVSS 4.6)
- [CVE-2021-3898](https://cve.now/CVE-2021-3898.md): Versions of Motorola Ready For and Motorola Device Help Android applications prior to 2021-04-08 do not properly verify the server certifica (CVSS 6.8)
- [CVE-2021-3793](https://cve.now/CVE-2021-3793.md): An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow an unauthenticated (CVSS 6.5)
- [CVE-2021-3792](https://cve.now/CVE-2021-3792.md): Some device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encrypted which could lead (CVSS 5.3)
- [CVE-2021-3791](https://cve.now/CVE-2021-3791.md): An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated at (CVSS 6.5)
- [CVE-2021-3790](https://cve.now/CVE-2021-3790.md): A buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated (CVSS 6.5)
- [CVE-2021-3789](https://cve.now/CVE-2021-3789.md): An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with phys (CVSS 4.2)
- [CVE-2021-3788](https://cve.now/CVE-2021-3788.md): An exposed debug interface was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access u (CVSS 6.8)
- [CVE-2021-3787](https://cve.now/CVE-2021-3787.md): A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local access to obtain the M (CVSS 6.4)
- [CVE-2021-3577](https://cve.now/CVE-2021-3577.md): An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an att (CVSS 8.8)
- [CVE-2021-3459](https://cve.now/CVE-2021-3459.md): A privilege escalation vulnerability was reported in the MM1000 device configuration web server, which could allow privileged shell access a (CVSS 6.8)
- [CVE-2021-3458](https://cve.now/CVE-2021-3458.md): The Motorola MM1000 device configuration portal can be accessed without authentication, which could allow adapter settings to be modified. (CVSS 6.1)
- [CVE-2021-3460](https://cve.now/CVE-2021-3460.md): The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communication with the support (CVSS 8.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/motorola
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.