CVE-2017-9494

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows remote attackers to enable a Remote Web Inspector that is accessible from the public Internet...

CVE-2017-9497

The CVE-2017-9497 entry concerns Comcast firmware on Motorola MX011ANM devices (firmware MX011AN_2.9p6s1_PROD_sey). Affected component is the device firmware exposed via the diagnostics Web Inspector route; when a user with physical proximity pulls up the diagnostics menu, an attacker can post to...

CVE-2017-9496

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows physically proximate attackers to access an SNMP server by connecting a cable to the Ethernet port, and then establishing communication with the device's link-local IPv6 address...

CVE-2017-9498

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for...

CVE-2017-9497

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows physically proximate attackers to execute arbitrary commands as root by pulling up the diagnostics menu on the set-top box, and then posting to a Web Inspector route...

CVE-2017-9495

The affected product is Motorola MX011ANM Comcast firmware (MX011AN_2.9p6s1_PROD_sey). A vulnerability allows physically proximate attackers to read arbitrary files by manipulating RF4CE remote input (EXIT, Down, Down, 2) to reach a diagnostic display and trigger a Remote Web Inspector script. Th...

CVE-2017-9494

The CVE-2017-9494 issue affects Comcast firmware on Motorola MX011ANM devices (firmware MX011AN_2.9p6s1_PROD_sey). The root concern is that a remote attacker can enable the Remote Web Inspector, which becomes accessible from the public Internet. Public details describe the device class and firmwa...

CVE-2017-9496

CVE-2017-9496 affects Comcast firmware on the Motorola MX011ANM (firmware MX011AN_2.9p6s1_PROD_sey). The vulnerability allows a physically proximate attacker to access the device’s SNMP server by connecting a cable to the Ethernet port and communicating with the device’s link-local IPv6 address. ...