Back
CVE-2019-9117
CRITICAL
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetNetworkTomographySettings API function, as demonstrated by shell metacharacters in the tomography_ping_number field.
Published: Mar 7, 2019
Modified: Jun 17, 2026
CWE-78
CVSS Metrics
CVSSv3
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products (2)
| Vendor | Product | Version |
|---|---|---|
| motorola | m2_firmware | 1.07 |
| motorola | c1_firmware | 1.01 |
GitHub Security Advisory GHSA-gjc3-4w5c-43mc
An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively....
References (2)
- https://github.com/lieanu/vuls/blob/master/motorola/M2_C1/SetNetworkTomographySettings.md Exploit, Third Party Advisory
- https://github.com/lieanu/vuls/blob/master/motorola/M2_C1/SetNetworkTomographySettings.md Exploit, Third Party Advisory
Risk Scores
CVSS Score
9.8 / 10
EPSS Score
6.18%
Top 7% most likely to be exploited
Threat Score
41.1 / 100
Data Sources
NVD
EPSS
GitHub