CVE-2017-9495: Infoleak
The Comcast firmware on Motorola MX011ANM (firmware version MX011AN2.9p6s1PRODsey) devices allows physically proximate attackers to read arbitrary files by pressing "EXIT, Down, Down, 2" on an RF4CE remote to reach the diagnostic display, and then launching a Remote Web Inspector script.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9495?
The severity of CVE-2017-9495 is considered to be high due to the potential for local attackers to exploit the vulnerability and read arbitrary files.
How do I fix CVE-2017-9495?
To fix CVE-2017-9495, update the Motorola MX011ANM firmware to the latest version released by the vendor that addresses this vulnerability.
What type of attack does CVE-2017-9495 enable?
CVE-2017-9495 enables physically proximate attackers to read arbitrary files on the device.
Which devices are affected by CVE-2017-9495?
CVE-2017-9495 specifically affects the Motorola MX011ANM devices with firmware version MX011AN_2.9p6s1_PROD_sey.
Can CVE-2017-9495 be exploited remotely?
No, CVE-2017-9495 requires physical proximity to exploit the vulnerability.