What is the severity of CVE-2017-9498?

CVE-2017-9498 is classified as a critical vulnerability due to its potential to allow unauthorized firmware uploads.

How do I fix CVE-2017-9498?

To fix CVE-2017-9498, users should update their devices to the latest firmware version provided by the manufacturer that addresses this vulnerability.

What does CVE-2017-9498 allow an attacker to do?

CVE-2017-9498 allows a local attacker with root access to upload arbitrary firmware images to affected devices.

Is there a known exploit for CVE-2017-9498?

While there may not be publicly available exploit code, the vulnerability's nature indicates that it could be exploited by anyone with local access to the device.

Vulnerability/
CVE-2017-9498

medium

5.5

CWE

354

31/7/2017

3/10/2019

CVE-2017-9498

First published: Mon Jul 31 2017(Updated: )

The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for the firmware.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Motorola Mx011anm Firmware	=mx011an_2.9p6s1_prod_sey
Motorola Mx011anm Firmware
Comcast Xfinity XR11 Firmware
Comcast Xfinity XR11

Never miss a vulnerability like this again

Reference Links

https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-42.remote-OTA.txt

Frequently Asked Questions

What is the severity of CVE-2017-9498?
CVE-2017-9498 is classified as a critical vulnerability due to its potential to allow unauthorized firmware uploads.
How do I fix CVE-2017-9498?
To fix CVE-2017-9498, users should update their devices to the latest firmware version provided by the manufacturer that addresses this vulnerability.
Who is affected by CVE-2017-9498?
CVE-2017-9498 affects users of Motorola MX011ANM firmware version MX011AN_2.9p6s1_PROD_sey and Comcast Xfinity XR11-20 devices.
What does CVE-2017-9498 allow an attacker to do?
CVE-2017-9498 allows a local attacker with root access to upload arbitrary firmware images to affected devices.
Is there a known exploit for CVE-2017-9498?
While there may not be publicly available exploit code, the vulnerability's nature indicates that it could be exploited by anyone with local access to the device.

agent/type
agent/first-publish-date
agent/last-modified-date
agent/references
agent/severity
agent/author
agent/weakness
agent/description
agent/event
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/motorola
canonical/motorola mx011anm firmware
version/motorola mx011anm firmware/mx011an_2.9p6s1_prod_sey
vendor/comcast
canonical/comcast xfinity xr11 firmware
canonical/comcast xfinity xr11

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.