Motorolasolutions vulnerabilities
We track 4 vulnerabilities in Motorolasolutions products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on June 13, 2024.
Latest Motorolasolutions vulnerabilities
- 8.7 High severity
Vigilant Fixed LPR Coms Box (BCAV1F2-C600): Authentication Bypass by Capture-replay
Transmitted data is logged between the device and the backend service. An attacker could use these logs to perform a replay attack to replicate calls.
- 8.5 High severity
Vigilant Fixed LPR Coms Box (BCAV1F2-C600): Insufficiently Protected Credentials
Utilizing default credentials, an attacker is able to log into the camera's operating system which could allow changes to be made to the operations or shutdown the camera requiring a physical reboot of the system.
- 7.5 High severity
Mdlc: Cleartext Storage of Sensitive Information
The Motorola MOSCAD Toolbox software through 2022-05-02 relies on a cleartext password. It utilizes an MDLC driver to communicate with MOSCAD/ACE RTUs for engineering purposes. Access to these communications is protected by a password stored in cleartext in th
- 9.8 Critical severity
Mdlc: Use of a Broken or Risky Cryptographic Algorithm
The Motorola MDLC protocol through 2022-05-02 mishandles message integrity. It supports three security modes: Plain, Legacy Encryption, and New Encryption. In Legacy Encryption mode, traffic is encrypted via the Tiny Encryption Algorithm (TEA) block-cipher in