CVE-2017-9493

MEDIUM

Motorola MX011ANM <MX011AN_2.9p6s1_PROD_sey - RCE

Title source: llm

Description

The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows remote attackers to conduct successful forced-pairing attacks (between an RF4CE remote and a set-top box) by repeatedly transmitting the same pairing code.

References (1)

[Third Party Advisory] https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-37.rf4ce-forced-pairing.vendor.txt

View Writeup ZIP pw:eip

Scores

CVSS v3 6.3

EPSS 0.0020

EPSS Percentile 42.2%

Attack Vector ADJACENT_NETWORK

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Details

Status published

Products (2)

cisco/mx011anm_firmware

n/a/n/a

Published Jul 31, 2017

Tracked Since Feb 18, 2026