CVE-2020-21933

An issue was discovered in Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n where the admin password and private key could be found in the log tar package.
References
Link Resource
https://github.com/cc-crack/router/blob/master/motocx2.md Exploit Third Party Advisory
https://l0n0l.xyz/post/motocx2/ Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:motorola:cx2_firmware:1.0.2:*:*:*:*:*:*:*
cpe:2.3:h:motorola:cx2:-:*:*:*:*:*:*:*

History

30 Jul 2021, 14:48

Type Values Removed Values Added
CPE cpe:2.3:o:motorola:cx2_firmware:1.0.2:*:*:*:*:*:*:*
cpe:2.3:h:motorola:cx2:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : 5.0
v3 : 7.5
CWE CWE-532
References (MISC) https://l0n0l.xyz/post/motocx2/ - (MISC) https://l0n0l.xyz/post/motocx2/ - Exploit, Third Party Advisory
References (MISC) https://github.com/cc-crack/router/blob/master/motocx2.md - (MISC) https://github.com/cc-crack/router/blob/master/motocx2.md - Exploit, Third Party Advisory

21 Jul 2021, 15:21

Type Values Removed Values Added
New CVE

Information

Published : 2021-07-21 15:15

Updated : 2023-12-10 13:55


NVD link : CVE-2020-21933

Mitre link : CVE-2020-21933

CVE.ORG link : CVE-2020-21933


JSON object : View

Products Affected

motorola

  • cx2_firmware
  • cx2
CWE
CWE-532

Insertion of Sensitive Information into Log File