Mtm5500 Firmware vulnerabilities
4 known vulnerabilities in Mtm5500 Firmware from Motorola. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.2 High severity
Mobile Radio: Improper Handling of Overlap Between Protected Memory Ranges
Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores. The SoC provides two memory protection units, MPU1 and MPU2, to enforce the trust boundary between the two cores. Since both u
- 8.8 High severity
Mobile Radio: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source. Low boottime entropy and limited re-seeding of the pool renders the authentication challenge vulnerable to two a
- 8.2 High severity
Mobile Radio: Release of Invalid Pointer or Reference
The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment (TEE) modules. Two modules are used, one responsible for KVL key management and the other for TETRA cryptographic functionality. In both modules,
- 8.8 High severity
Mobile Radio: Use of Externally-Controlled Format String
A format string vulnerability exists in Motorola MTM5000 series firmware AT command handler for the AT+CTGL command. An attacker-controllable string is improperly handled, allowing for a write-anything-anywhere scenario. This can be leveraged to obtain arbitra