CVE-2017-9498
Severity Score
5.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for the firmware.
El firmware Comcast en los dispositivos Motorola MX011ANM (versión de firmware MX011AN_2.9p6s1_PROD_sey) y Xfinity XR11-20 Voice Remote, permite a los usuarios locales cargar imágenes de firmware arbitrarias en un XR11 aprovechando el acceso root. En otras palabras, no existe un mecanismo de protección que incluya firmas digitales para el firmware.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-06-07 CVE Reserved
- 2017-07-31 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-354: Improper Validation of Integrity Check Value
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-42.remote-OTA.txt | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Motorola Search vendor "Motorola" | Mx011anm Firmware Search vendor "Motorola" for product "Mx011anm Firmware" | mx011an_2.9p6s1_prod_sey Search vendor "Motorola" for product "Mx011anm Firmware" and version "mx011an_2.9p6s1_prod_sey" | - |
Affected
| in | Motorola Search vendor "Motorola" | Mx011anm Search vendor "Motorola" for product "Mx011anm" | - | - |
Safe
|
| Comcast Search vendor "Comcast" | Xfinity Xr11-20 Firmware Search vendor "Comcast" for product "Xfinity Xr11-20 Firmware" | - | - |
Affected
| in | Comcast Search vendor "Comcast" | Xfinity Xr11-20 Search vendor "Comcast" for product "Xfinity Xr11-20" | - | - |
Safe
|