vulnwire
5.5med

CVE-2017-9498

The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local…

Published 9 y ago · modified 4 mo ago · JSON

CVSS
5.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.2%
percentile 9%
Public exploits
0
none known

The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for the firmware.

Exploit prediction (EPSS)

0.19% probability of exploitation in the next 30 days, higher than 9% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.05.5CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
NVD2.02.1AV:L/AC:L/Au:N/C:N/I:P/A:N

Classification

Weakness
  • CWE-354 Improper Validation of Integrity Check Value

References

  • github.com /BastilleResearch/CableTap/blob/master/doc/advisories/bastille-42.remote-OTA.txt · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.