What’s Vulnerable › Vulnerabilities

CVE-2017-9498

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-07-31 · updated 2026-06-17
• Weakness: CWE-354

Description

The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for the firmware.

Affected products

• Comcast Xfinity Xr11-20 Firmware: all versions
• Motorola Mx011Anm Firmware: mx011an_2.9p6s1_prod_sey

References

• https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-42.remote-OTA.txt
• https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-42.remote-OTA.txt

Get alerted when CVE-2017-9498 or the next vulnerability affects your stack