CVE-2022-26941
CVE-2022-26941 is a critical-severity vulnerability in Motorola Mtm5500 Firmware with a CVSS 3.x base score of 9.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-134.
Key facts
- Severity: Critical (CVSS 3.x base score 9.6)
- EPSS exploit prediction: 0% (25th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-134
- Affected product: Motorola Mtm5500 Firmware
- Published:
- Last modified:
Description
A format string vulnerability exists in Motorola MTM5000 series firmware AT command handler for the AT+CTGL command. An attacker-controllable string is improperly handled, allowing for a write-anything-anywhere scenario. This can be leveraged to obtain arbitrary code execution inside the teds_app binary, which runs with root privileges.
Frequently asked questions
- What is CVE-2022-26941?
- A format string vulnerability exists in Motorola MTM5000 series firmware AT command handler for the AT+CTGL command. An attacker-controllable string is improperly handled, allowing for a write-anything-anywhere scenario. This can be leveraged to obtain arbitrary code execution inside the teds_app binary, which runs with root privileges.
- How severe is CVE-2022-26941?
- CVE-2022-26941 has a CVSS 3.x base score of 9.6, rated critical severity. It is exploitable over an adjacent network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2022-26941 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (25th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2022-26941?
- CVE-2022-26941 primarily affects Motorola Mtm5500 Firmware. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2022-26941?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2022-26941 published?
- CVE-2022-26941 was published on 2023-10-19 and last updated on 2026-06-17.
References
Affected products (2)
- cpe:2.3:o:motorola:mtm5500_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:motorola:mtm5400_firmware:-:*:*:*:*:*:*:*
More vulnerabilities in Motorola Mtm5500 Firmware
- CVE-2022-26943 — High (CVSS 8.8): The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register…
- CVE-2022-26942 — High (CVSS 8.2): The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment…
- CVE-2022-27813 — High (CVSS 8.1): Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM…
All CVEs affecting Motorola Mtm5500 Firmware →
Other CWE-134 vulnerabilities
- CVE-2012-1851 — Critical (CVSS 10.0): Format string vulnerability in the Print Spooler service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,…
- CVE-2012-0242 — Critical (CVSS 10.0): Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary…
- CVE-2011-2475 — Critical (CVSS 10.0): Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server…
- CVE-2011-1568 — Critical (CVSS 10.0): Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and…
- CVE-2010-4235 — Critical (CVSS 10.0): Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server…
- CVE-2011-0270 — Critical (CVSS 10.0): Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows…