Motorola CX2L MWR04L Firmware vulnerabilities

2 CVEs affecting Motorola CX2L MWR04L Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-15513, published 2019-08-23.

More from Motorola.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-15513, published 2019-08-23. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. An issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) before 15.05.1 as used on Motorola CX2L MWR04L 1.01 and C1 MWR03 1.01 devices. /tmp/.uci/network…
• CVE-2019-13129, published 2019-07-01. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. On the Motorola router CX2L MWR04L 1.01, there is a stack consumption (infinite recursion) issue in scopd via TCP port 8010 and UDP port 8080. It is caused by snprintf and inappropriate length…