by Kastro
Paper/Archive/CVE-2021-3460

CVE-2021-3460

Motorola MH702x — The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communication with the supp…

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 47.0.470 × 209.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communication with the support server which could lead to the communication channel being accessible by an attacker.

Affected

ProductAffectedFixed inSource
MH702xunspecified – < 2.0.0.3012.0.0.301CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
lenovo (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refmotorolamentor.zendesk.com/hc/en-us/articles/1260804087249