Critical severity9.6NVD Advisory· Published Oct 19, 2023· Updated Jun 17, 2026
CVE-2022-26941
CVE-2022-26941
Description
A format string vulnerability exists in Motorola MTM5000 series firmware AT command handler for the AT+CTGL command. An attacker-controllable string is improperly handled, allowing for a write-anything-anywhere scenario. This can be leveraged to obtain arbitrary code execution inside the teds_app binary, which runs with root privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- cpe:2.3:o:motorola:mtm5400_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:motorola:mtm5500_firmware:-:*:*:*:*:*:*:*
- Motorola/Mobile Radiov5Range: MTM5000
Patches
Vulnerability mechanics
References
1- tetraburst.comnvdTechnical Description
News mentions
0No linked articles in our index yet.