CVE-2017-9498
First published: Mon Jul 31 2017(Updated: )
The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for the firmware.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Motorola Mx011anm Firmware | =mx011an_2.9p6s1_prod_sey | |
| Motorola MX011ANM | ||
| Comcast Xfinity Xr11-20 Firmware | ||
| Comcast Xfinity Xr11-20 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/weakness
- vendor/motorola
- canonical/motorola mx011anm firmware
- version/motorola mx011anm firmware/mx011an_2.9p6s1_prod_sey
- canonical/motorola mx011anm
- vendor/comcast
- canonical/comcast xfinity xr11-20 firmware
- canonical/comcast xfinity xr11-20