MO
Vendor
Motorola
170
CVEs
1
On KEV
1
New 30D
Products
SA4.4
Setup App
Motorola
1 CVEs0 on KEV1 new
AN7.8
Android
Motorola
2 CVEs1 on KEV0 new
PH8.4
Phones
Motorola
18 CVEs0 on KEV0 new
CF9.8
Cx2 Firmware
Motorola
11 CVEs0 on KEV0 new
MF9.8
M2 Firmware
Motorola
10 CVEs0 on KEV0 new
CF8.8
Cx2l Firmware
Motorola
6 CVEs0 on KEV0 new
MF8.8
Mr2600 Firmware
Motorola
6 CVEs0 on KEV0 new
AF9.8
Ace1000 Firmware
Motorola
5 CVEs0 on KEV0 new
CF9.8
C1 Firmware
Motorola
5 CVEs0 on KEV0 new
MF8.8
Mtm5400 Firmware
Motorola
4 CVEs0 on KEV0 new
MF8.8
Mtm5500 Firmware
Motorola
4 CVEs0 on KEV0 new
MS9.8
Mbts Site Controller Firmware
Motorola
3 CVEs0 on KEV0 new
MI7.5
Moscad IP Gateway Firmware
Motorola
3 CVEs0 on KEV0 new
MF5.5
Mx011anm Firmware
Motorola
3 CVEs0 on KEV0 new
PU–
Pebl U6
Motorola
3 CVEs0 on KEV0 new
QM7.3
Q14 Mesh Router Firmware
Motorola
3 CVEs0 on KEV0 new
SF4.4
Smartphone Firmware
Motorola
3 CVEs0 on KEV0 new
SU–
Surfboard
Motorola
3 CVEs0 on KEV0 new
VF9.8
Vigilant Fixed Lpr Coms Box Firmware
Motorola
3 CVEs0 on KEV0 new
CP–
Cpei300
Motorola
2 CVEs0 on KEV0 new
CM7.5
Cx2l Mwr04l Firmware
Motorola
2 CVEs0 on KEV0 new
DX–
Defy XT
Motorola
2 CVEs0 on KEV0 new
DH6.5
Device Help
Motorola
2 CVEs0 on KEV0 new
MB8.8
Mbts Base Radio Firmware
Motorola
2 CVEs0 on KEV0 new
MF6.8
Mm1000 Firmware
Motorola
2 CVEs0 on KEV0 new
MC–
Motorola Cablerouter
Motorola
2 CVEs0 on KEV0 new
MS–
Motorola Scanner Sdk
Motorola
2 CVEs0 on KEV0 new
QF7.2
Q14 Firmware
Motorola
2 CVEs0 on KEV0 new
TI–
Timbuktu
Motorola
2 CVEs0 on KEV0 new
V6–
V600
Motorola
2 CVEs0 on KEV0 new
AI7.5
Ace IP Gateway (4600) Firmware
Motorola
1 CVEs0 on KEV0 new
AH–
Atrix HD
Motorola
1 CVEs0 on KEV0 new
CM7.5
C1 Mwr03 Firmware
Motorola
1 CVEs0 on KEV0 new
E3–
E398
Motorola
1 CVEs0 on KEV0 new
EB8.8
Ebts Base Radio Firmware
Motorola
1 CVEs0 on KEV0 new
ES8.4
Ebts Site Controller Firmware
Motorola
1 CVEs0 on KEV0 new
E22.8
Edge+ 2023
Motorola
1 CVEs0 on KEV0 new
E42.8
Edge 40 Pro
Motorola
1 CVEs0 on KEV0 new
FI6.5
Firmware
Motorola
1 CVEs0 on KEV0 new
FF7.5
Fx9500-41324d41-us Firmware
Motorola
1 CVEs0 on KEV0 new
FF7.5
Fx9500-41324d41-ww Firmware
Motorola
1 CVEs0 on KEV0 new
FF7.5
Fx9500-81324d41-us Firmware
Motorola
1 CVEs0 on KEV0 new
FF7.5
Fx9500-81324d41-ww Firmware
Motorola
1 CVEs0 on KEV0 new
G32.8
g34
Motorola
1 CVEs0 on KEV0 new
G32.8
g34t
Motorola
1 CVEs0 on KEV0 new
G52.8
g45 5G
Motorola
1 CVEs0 on KEV0 new
IT4.8
Interface Test Tool
Motorola
1 CVEs0 on KEV0 new
MF7.4
Mbp853 Firmware
Motorola
1 CVEs0 on KEV0 new
MF9.8
Mh702x Firmware
Motorola
1 CVEs0 on KEV0 new
ME5.5
Moto E20 Firmware
Motorola
1 CVEs0 on KEV0 new
MO–
Motorazr
Motorola
1 CVEs0 on KEV0 new
MC–
Motorola Cable Modem
Motorola
1 CVEs0 on KEV0 new
MF9.8
Motorola Firmware
Motorola
1 CVEs0 on KEV0 new
MR6.5
Mr2600
Motorola
1 CVEs0 on KEV0 new
NE–
Netoctopus
Motorola
1 CVEs0 on KEV0 new
RA–
Razr
Motorola
1 CVEs0 on KEV0 new
R22.8
Razr 2023
Motorola
1 CVEs0 on KEV0 new
R42.8
Razr 40
Motorola
1 CVEs0 on KEV0 new
R42.8
Razr 40 Ultra
Motorola
1 CVEs0 on KEV0 new
RH–
Razr HD
Motorola
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-93832 | SA Setup App Motorola | 4.4 | Oct 1 | A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps |
| CVE-2026-18058 | SC Smart Connect Application Motorola | 7.5 | Sep 2 | The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps |
| CVE-2026-5804 | PH Phones Motorola | 8.4 | May 19 | An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit) |
| CVE-2025-2818 | SC Smart Connect Android Application Motorola | 3.5 | Jul 17 | A vulnerability was reported in version 1.0 of the Bluetooth Transmission Alliance protocol adopted by Motorola Smart Connect Android Application that could allow a nearby… |
| CVE-2025-1700 | SF Software Fix Motorola | 7.0 | Jul 17 | A DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart Assistant) installer that could allow a local attacker to escalate privileges during… |
| CVE-2025-1699 | G3 g34t Motorola | 2.8 | Jun 11 | An incorrect default permissions vulnerability was reported in the MotoSignature application that could result in unauthorized access |
| CVE-2025-1698 | E2 Edge+ 2023 Motorola | 2.8 | Jun 11 | Null pointer exception vulnerabilities were reported in the fingerprint sensor service that could allow a local attacker to cause a denial of service |
| CVE-2024-45880 | CF Cx2l Firmware Motorola | 8.0 | Oct 8 | A command injection vulnerability exists in Motorola CX2L router v1.0.2 and below |
| CVE-2022-4001 | QM Q14 Mesh Router Firmware Motorola | 7.3 | Jul 31 | An authentication bypass vulnerability could allow an attacker to access API functions without authentication |
| CVE-2022-4002 | QM Q14 Mesh Router Firmware Motorola | 7.2 | Jul 31 | A command injection vulnerability could allow an authenticated user to execute operating system commands as root via a specially crafted API request |
| CVE-2022-4003 | QM Q14 Mesh Router Firmware Motorola | 6.5 | Jul 31 | A denial-of-service vulnerability could allow an authenticated user to trigger an internal service restart via a specially crafted API request |
| CVE-2024-38281 | VF Vigilant Fixed Lpr Coms Box Firmware Motorola | 9.8 | Jun 13 | Use of Hard-coded Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600) |
| CVE-2024-38280 | VF Vigilant Fixed Lpr Coms Box Firmware Motorola | 4.6 | Jun 13 | Cleartext Storage in a File or on Disk in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600) |
| CVE-2024-38279 | VF Vigilant Fixed Lpr Coms Box Firmware Motorola | 4.6 | Jun 13 | Authentication Bypass Using an Alternate Path or Channel in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600) |
| CVE-2024-3480 | PH Phones Motorola | 2.8 | May 3 | An Implicit intent vulnerability was reported in the Motorola framework that could allow an attacker to read telephony-related data |
| CVE-2024-3479 | PH Phones Motorola | 2.8 | May 3 | An improper export vulnerability was reported in the Motorola Enterprise MotoDpms Provider (com.motorola.server.enterprise.MotoDpmsProvider) that could allow a local attacker to… |
| CVE-2024-3109 | PH Phones Motorola | 6.3 | May 3 | A hard-coded AES key vulnerability was reported in the Motorola GuideMe application, along with a lack of URI sanitation, could allow for a local attacker to read arbitrary files |
| CVE-2024-3108 | PH Phones Motorola | 5.5 | May 3 | An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquire the location of the device without… |
| CVE-2023-41830 | PH Phones Motorola | 6.5 | May 3 | An improper absolute path traversal vulnerability was reported for the Ready For application allowing a local application access to files without authorization |
| CVE-2023-41828 | PH Phones Motorola | 4.4 | May 3 | An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider |
| CVE-2023-41826 | PH Phones Motorola | 5.1 | May 3 | A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or interact with non-exported software… |
| CVE-2023-41825 | PH Phones Motorola | 2.8 | May 3 | A path traversal vulnerability was reported in the Motorola Ready For application that could allow a local attacker to access local files |
| CVE-2023-41824 | PH Phones Motorola | 2.8 | May 3 | An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data |
| CVE-2023-41823 | PH Phones Motorola | 4.4 | May 3 | An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauthorized Activities |
| CVE-2023-41822 | PH Phones Motorola | 4.8 | May 3 | An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malicious local application to execute OS commands |
| CVE-2023-41821 | PH Phones Motorola | 5.0 | May 3 | A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to read sensitive user information |
| CVE-2023-41820 | PH Phones Motorola | 5.0 | May 3 | An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices |
| CVE-2023-41819 | PH Phones Motorola | 6.1 | May 3 | A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local attacker to access unauthorized content providers |
| CVE-2023-41818 | PH Phones Motorola | 5.0 | May 3 | An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a local attacker to read system logs |
| CVE-2023-41817 | PH Phones Motorola | 2.8 | May 3 | An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read unauthorized information |
| CVE-2023-41816 | PH Phones Motorola | 5.0 | May 3 | An improper export vulnerability was reported in the Motorola Services Main application that could allow a local attacker to write to a local database |
| CVE-2024-25360 | CF Cx2l Firmware Motorola | 5.3 | Feb 12 | A hidden interface in Motorola CX2L Router firmware v1.0.1 leaks information regarding the SystemWizardStatus component via sending a crafted request to device_web_ip |
| CVE-2024-23630 | MF Mr2600 Firmware Motorola | 8.8 | Jan 26 | An arbitrary firmware upload vulnerability exists in the Motorola MR2600 |
| CVE-2024-23629 | MF Mr2600 Firmware Motorola | 7.5 | Jan 26 | An authentication bypass vulnerability exists in the web component of the Motorola MR2600 |
| CVE-2024-23628 | MF Mr2600 Firmware Motorola | 8.8 | Jan 26 | A command injection vulnerability exists in the 'SaveStaticRouteIPv6Params' parameter of the Motorola MR2600 |
| CVE-2024-23627 | MF Mr2600 Firmware Motorola | 8.8 | Jan 26 | A command injection vulnerability exists in the 'SaveStaticRouteIPv4Params' parameter of the Motorola MR2600 |
| CVE-2024-23626 | MF Mr2600 Firmware Motorola | 8.8 | Jan 26 | A command injection vulnerability exists in the ‘SaveSysLogParams’ parameter of the Motorola MR2600 |
| CVE-2022-3681 | MR Mr2600 Motorola | 6.5 | Oct 27 | A vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an attacker within range of the wireless network to successfully brute force the WPS… |
| CVE-2022-27813 | MF Mtm5400 Firmware Motorola | 8.2 | Oct 19 | Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores |
| CVE-2022-26943 | MF Mtm5500 Firmware Motorola | 8.8 | Oct 19 | The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source |
| CVE-2022-26942 | MF Mtm5400 Firmware Motorola | 8.2 | Oct 19 | The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment (TEE) modules |
| CVE-2022-26941 | MF Mtm5500 Firmware Motorola | 8.8 | Oct 19 | A format string vulnerability exists in Motorola MTM5000 series firmware AT command handler for the AT+CTGL command |
| CVE-2022-3407 | SF Smartphone Firmware Motorola | 4.3 | Sep 1 | I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device,… |
| CVE-2023-23774 | MS Mbts Site Controller Firmware Motorola | 8.4 | Aug 29 | Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception |
| CVE-2023-23773 | MB Mbts Base Radio Firmware Motorola | 8.8 | Aug 29 | Motorola EBTS/MBTS Base Radio fails to check firmware authenticity |
| CVE-2023-23772 | MS Mbts Site Controller Firmware Motorola | 8.8 | Aug 29 | Motorola MBTS Site Controller fails to check firmware update authenticity |
| CVE-2023-23771 | MB Mbts Base Radio Firmware Motorola | 8.4 | Aug 29 | Motorola MBTS Base Radio accepts hard-coded backdoor password |
| CVE-2023-23770 | MS Mbts Site Controller Firmware Motorola | 9.8 | Aug 29 | Motorola MBTS Site Controller accepts hard-coded backdoor password |
| CVE-2023-31531 | CF Cx2l Firmware Motorola | 8.8 | May 11 | Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the tomography_ping_number parameter |
| CVE-2023-31530 | CF Cx2l Firmware Motorola | 8.8 | May 11 | Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the smartqos_priority_devices parameter |
| CVE-2023-31529 | CF Cx2l Firmware Motorola | 8.8 | May 11 | Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the system_time_timezone parameter |
| CVE-2023-31528 | CF Cx2l Firmware Motorola | 8.8 | May 11 | Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the staticroute_list parameter |
| CVE-2022-34885 | MF Mr2600 Firmware Motorola | 6.7 | Jan 30 | An improper input sanitization vulnerability in the Motorola MR2600 router could allow a local user with elevated permissions to execute arbitrary code |
| CVE-2022-3917 | ME Moto E20 Firmware Motorola | 5.5 | Dec 14 | Improper access control of bootloader function was discovered in Motorola Mobility Motorola e20 prior to version RONS31.267-38-8 allows attacker with local access to read… |
| CVE-2022-30276 | MI Moscad IP Gateway Firmware Motorola | 7.5 | Jul 26 | The Motorola MOSCAD and ACE line of RTUs through 2022-05-02 omit an authentication requirement |
| CVE-2022-30274 | AF Ace1000 Firmware Motorola | 9.8 | Jul 26 | The Motorola ACE1000 RTU through 2022-05-02 uses ECB encryption unsafely |
| CVE-2022-30272 | AF Ace1000 Firmware Motorola | 7.2 | Jul 26 | The Motorola ACE1000 RTU through 2022-05-02 mishandles firmware integrity |
| CVE-2022-30271 | AF Ace1000 Firmware Motorola | 9.8 | Jul 26 | The Motorola ACE1000 RTU through 2022-05-02 ships with a hardcoded SSH private key and initialization scripts (such as /etc/init.d/sshd_service) only generate a new key if no… |
| CVE-2022-30270 | AF Ace1000 Firmware Motorola | 9.8 | Jul 26 | The Motorola ACE1000 RTU through 2022-05-02 has default credentials |
| CVE-2022-30269 | AF Ace1000 Firmware Motorola | 8.8 | Jul 26 | Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity |
