Vulnerability · Published Oct 19, 2023 · Assigned by NCSC-NL

CVE-2022-26941Format string vulnerability in AT+CTGL command in Motorola MTM5000

Critical 9.6

In plain English

A critical-severity security flaw in Mobile Radio from Motorola. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).

Severity (CVSS 3.1)9.6Critical

Exploit odds (30 days)0.4%top 69.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A format string vulnerability exists in Motorola MTM5000 series firmware AT command handler for the AT+CTGL command. An attacker-controllable string is improperly handled, allowing for a write-anything-anywhere scenario. This can be leveraged to obtain arbitrary code execution inside the teds_app binary, which runs with root privileges.

Affected products (as reported)

Vendor	Product	Versions
Motorola	Mobile Radio	MTM5000

Weakness: CWE-134 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:F/RL:U/RC:C/CR:X/IR:X/AR:X/MAV:A/MAC:L/MPR:N/MUI:N/MS:C/MC:H/MI:H/MA:H

References

TETRA:BURST related