CVE-2024-25360 — MEDIUM (5.3)

Vulnerability Description

A hidden interface in Motorola CX2L Router firmware v1.0.1 leaks information regarding the SystemWizardStatus component via sending a crafted request to device_web_ip.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Motorola	Cx2L Firmware	1.0.1
Motorola	Cx2L	-

Related Weaknesses (CWE)

CWE-922

References

https://github.com/leetsun/Hints/tree/main/moto-CX2L/4Broken Link
https://github.com/leetsun/Hints/tree/main/moto-CX2L/4Broken Link

FAQ

What is CVE-2024-25360?

CVE-2024-25360 is a vulnerability with a CVSS score of 5.3 (MEDIUM). A hidden interface in Motorola CX2L Router firmware v1.0.1 leaks information regarding the SystemWizardStatus component via sending a crafted request to device_web_ip.

How severe is CVE-2024-25360?

CVE-2024-25360 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-25360?

Check the references section above for vendor advisories and patch information. Affected products include: Motorola Cx2L Firmware, Motorola Cx2L.