What’s Vulnerable › Vulnerabilities

CVE-2022-27813: Unconfigured memory protection modules in Motorola MTM5000

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-10-19 · updated 2026-06-17
• Weakness: CWE-1260

Description

Motorola MTM5000 series firmwares lack properly configured memory protection of pages shared between the OMAP-L138 ARM and DSP cores. The SoC provides two memory protection units, MPU1 and MPU2, to enforce the trust boundary between the two cores. Since both units are left unconfigured by the firmwares, an adversary with control over either core can trivially gain code execution on the other, by overwriting code located in shared RAM or DDR2 memory regions.

Affected products

• Motorola Mtm5400 Firmware: all versions
• Motorola Mtm5500 Firmware: all versions

References

• https://tetraburst.com/
• https://tetraburst.com/

Get alerted when CVE-2022-27813 or the next vulnerability affects your stack