MAL-2023-8546 Malicious code in xfinity-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56b70e09dfa991a04792438328717b5904e3250501889b394aaef6f02bd5890a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in xfinity-web

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in xfinity-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56b70e09dfa991a04792438328717b5904e3250501889b394aaef6f02bd5890a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-738 Malicious code in @xfinity/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9a1f10d5f6aa7b39416dcfd78a0c6036c840ddd308e7c1a988e46acccc39046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @xfinity/fetlife-assets

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

wifi.xfinity.com XSS vulnerability

Open Bug Bounty ID: OBB-645916 Description| Value ---|--- Affected Website:| wifi.xfinity.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Comcast Patches Router Bug That Leaked Some Wi-Fi Passwords

Comcast patched a bug Monday that under certain conditions leaked customer SSID names and passwords of Xfinity routers. The flaw was accessible via the Comcast website used by customers to activate and manage their Xfinity router. The bug did not affect Comcast customers that used their own priva...

Motorola MX011ANM File Upload Vulnerability

The Motorola MX011ANM is an Internet set-top box device from Motorola, U.S.A. The Xfinity XR11-20 Voice Remote is a voice remote control device.Comcast is a set of firmware developed by Comcast, U.S.A., that runs in devices such as gateways and modems. . A security vulnerability in the Comcast...

Cisco DPC3939 Firmware Unauthorized Operation Vulnerability

Cisco DPC3939 is a wireless voice gateway product from Cisco USA. A security vulnerability exists in the Cisco DPC3939 firmware. Allows a remote attacker to discover the CM MAC address through an xfinitywifi hotspot connected to the device...

Design/Logic Flaw

Comcast XFINITY WiFi Home Hotspot devices allow remote attackers to spoof the identities of Comcast customers via a forged MAC address...

CVE-2017-9498

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for...

CVE-2017-9498

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for...

CVE-2017-9475

CVE-2017-9475 affects Comcast XFINITY WiFi Home Hotspot devices. It describes a remote‑level vulnerability where an attacker can spoof the identities of Comcast customers by forging MAC addresses. The available description does not specify the exact component, firmware version, or root cause beyo...

CVE-2017-9498

The CVE-2017-9498 entry affects Comcast firmware on Motorola MX011ANM and Xfinity XR11-20 Voice Remote, where there is no digital-signature protection for firmware updates. This allows a local attacker with root access to upload arbitrary firmware images to the XR11, as described in the vulnerabi...

CVE-2017-9498

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for...

CVE-2017-9498: Improper Validation of Integrity Check Value

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for...

CVE-2017-9475: Improper Authentication

Comcast XFINITY WiFi Home Hotspot devices allow remote attackers to spoof the identities of Comcast customers via a forged MAC address...

PT-2017-18968

Name of the Vulnerable Software and Affected Versions Comcast firmware on Motorola MX011ANM version MX011AN 2.9p6s1 PROD sey Comcast firmware on Xfinity XR11-20 Voice Remote devices affected versions not specified Description The issue allows local users to upload arbitrary firmware images to an...

PT-2017-18948

Name of the Vulnerable Software and Affected Versions Comcast XFINITY WiFi Home Hotspot devices affected versions not specified Description The issue allows remote attackers to spoof the identities of Comcast customers by using a forged MAC address. Recommendations At the moment, there is no...

R7-2016-23, R7-2016-26, R7-2016-27: Multiple Home Security Vulnerabilities

Executive Summary In October of 2016, former Rapid7 researcher Phil Bosco discovered a number of relatively low-risk vulnerabilities and issues involving home security systems that are common throughout the United States, and which have significant WiFi or Ethernet capabilities. The three systems...