PT-2021-20560 · Motorola · Motorola Mm1000

Published 2021-08-17 · Updated 2021-08-25 · CVE-2021-3458

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Motorola MM1000 (affected versions not specified)

Description: The Motorola MM1000 device configuration portal can be accessed without authentication, allowing adapter settings to be modified.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2021-3458

Affected Products

Motorola Mm1000

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-3458 · Security Note
• https://motorolamentor.zendesk.com/hc/en-us/articles/1260804047750 · Vendor Advisory
• https://t.me/cibsecurity/27441 · Telegram Post