CVE-2020-21935

A command injection vulnerability in HNAP1/GetNetworkTomographySettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute…

published July 21, 2021

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

🚨 A crafty command injection vulnerability lurks in the Motorola CX2 router, allowing hackers to execute arbitrary code with the right trick! 🔥 Think of this vulnerability like a sneaky mailman who can deliver any package to your house without checking the sender's ID—totally bypassing your security! If exploited, an attacker could gain complete control over your router, leading to unauthorized network access, data interception, or even launching attacks on other devices in your home. The consequences could be absolutely devastating for your privacy and security!

Put simply

Think of this vulnerability like a sneaky mailman who can deliver any package to your house without checking the sender's ID—totally bypassing your security! This vulnerability is found in the HNAP1/GetNetworkTomographySettings function of the Motorola CX2 router. It allows attackers to inject commands that the router will execute, effectively letting them run arbitrary code on the device.

What to do

If exploited, an attacker could gain complete control over your router, leading to unauthorized network access, data interception, or even launching attacks on other devices in your home. The consequences could be absolutely devastating for your privacy and security! To secure your router, make sure to update to the latest firmware version available from Motorola. Additionally, consider disabling any unused services and changing default credentials to further harden your device against potential exploits. You've got this! Stay vigilant and keep your devices updated! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04365 · 91.2th percentile
Published
2021-07-21T13:24Z
EPSS history
Timeline
  • 21 JUL 13:24Z
    A command injection vulnerability in HNAP1/GetNetworkTomographySettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute…
    cvelistv5