CVE-2017-9498 - CVE House
Back to Database
Status published Medium CVE-2017-9498

The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and...

Vulnerability Description

The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for the firmware.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-9498

Credits & Attribution

No credits recorded in the NVD database.

References

More from motorola

View All →
CVE-2022-30276
The Motorola MOSCAD and ACE line of RTUs through 2022-05-02...
High 7.5
CVE-2022-30274
The Motorola ACE1000 RTU through 2022-05-02 uses ECB encryption unsafely....
Critical 9.8
CVE-2022-30272
The Motorola ACE1000 RTU through 2022-05-02 mishandles firmware integrity. It...
High 7.2
CVE-2022-30271
The Motorola ACE1000 RTU through 2022-05-02 ships with a hardcoded...
Unknown 0
CVE-2022-30270
The Motorola ACE1000 RTU through 2022-05-02 has default credentials. It...
Critical 9.8

Affected Vendor

Affected Software

mx011anm firmware, xfinity xr11-20 firmware
Vulnerable Versions:
mx011an_2.9p6s1_prod_sey

Timeline

Official Publish: July 31st, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.