CVE-2017-9498

The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for the firmware.

CVSS v3 5.5 MEDIUM
CVSS v2.0 2.1 LOW

5.5^/10

CVSS v3 : MEDIUM

Vector : AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-42.remote-OTA.txt	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:motorola:mx011anm_firmware:mx011an_2.9p6s1_prod_sey:*:*:*:*:*:*:*

cpe:2.3:h:motorola:mx011anm:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:comcast:xfinity_xr11-20_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:comcast:xfinity_xr11-20:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-07-31 03:29

Updated : 2024-02-28 16:04

NVD link : CVE-2017-9498

Mitre link : CVE-2017-9498

CVE.ORG link : CVE-2017-9498

JSON object : View

Products Affected

motorola

mx011anm_firmware
mx011anm

comcast

xfinity_xr11-20_firmware
xfinity_xr11-20

CWE

CWE-354

Improper Validation of Integrity Check Value

{"id": "CVE-2017-9498", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2017-07-31T03:29:00.940", "references": [{"url": "https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-42.remote-OTA.txt", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-354"}]}], "descriptions": [{"lang": "en", "value": "The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for the firmware."}, {"lang": "es", "value": "El firmware Comcast en los dispositivos Motorola MX011ANM (versi\u00f3n de firmware MX011AN_2.9p6s1_PROD_sey) y Xfinity XR11-20 Voice Remote, permite a los usuarios locales cargar im\u00e1genes de firmware arbitrarias en un XR11 aprovechando el acceso root. En otras palabras, no existe un mecanismo de protecci\u00f3n que incluya firmas digitales para el firmware."}], "lastModified": "2019-10-03T00:03:26.223", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:motorola:mx011anm_firmware:mx011an_2.9p6s1_prod_sey:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E8281B6-AD0F-4665-AB01-EED113CF62FD"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:motorola:mx011anm:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4BD0633C-147B-43FE-A7D0-38ECEB28F90D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:comcast:xfinity_xr11-20_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C26C5A3-4C6C-4381-B28E-E71A27B20455"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:comcast:xfinity_xr11-20:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2EC523DA-A4A5-4CFA-BE62-73008627037D"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}