CVE-2021-3460

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-04-13 · updated 2026-06-17
Weakness: CWE-295

Description

The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communication with the support server which could lead to the communication channel being accessible by an attacker.

Affected products

Motorola MH702x: before 2.0.0.301 — fixed in 2.0.0.301

How to fix

Upgrade to a fixed version: Motorola MH702x 2.0.0.301. Check the vendor advisory for mitigations.

References

https://motorolamentor.zendesk.com/hc/en-us/articles/1260804087249
https://motorolamentor.zendesk.com/hc/en-us/articles/1260804087249

Get alerted when CVE-2021-3460 or the next vulnerability affects your stack