1. Home
  2. CVE Database
  3. CVE-2021-3460
HIGH · 8.1

CVE-2021-3460

The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communication with the support server which could lead to the communication channel being ...

Vulnerability Description

The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communication with the support server which could lead to the communication channel being accessible by an attacker.

CVSS Score

8.1

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
MotorolaMh702X Firmware< 2.0.0.301
MotorolaMh702X-

Related Weaknesses (CWE)

CWE-295

References

FAQ

What is CVE-2021-3460?

CVE-2021-3460 is a vulnerability with a CVSS score of 8.1 (HIGH). The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communication with the support server which could lead to the communication channel being ...

How severe is CVE-2021-3460?

CVE-2021-3460 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-3460?

Check the references section above for vendor advisories and patch information. Affected products include: Motorola Mh702X Firmware, Motorola Mh702X.