CVE-2021-3458 Auth bypass in MM1000 MoCA Adapter
Unauthenticated access to the Motorola MM1000 configuration portal allows attackers to modify adapter settings.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-3458?
CVE-2021-3458 is a medium-severity authentication bypass vulnerability in Motorola MM1000 MoCA Adapter, published on 17 Aug 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The Motorola MM1000 device configuration portal can be accessed without authentication, which could allow adapter settings to be modified.
Weakness: CWE-287
Which versions are affected by CVE-2021-3458?
It affects 1 product.
Products include Motorola Mm1000 Firmware.
How do I fix CVE-2021-3458?
No fix has been published for CVE-2021-3458 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-3458 being exploited?
There is no known exploitation of CVE-2021-3458 in the wild and no public exploit code.
Other vulnerabilities in Motorola MM1000 MoCA Adapter
Sources
Also known as GHSA-mfcq-xjjj-qpvg.