CVE-2017-9495

MEDIUM

Motorola MX011ANM - Info Disclosure

Title source: llm

Description

The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to read arbitrary files by pressing "EXIT, Down, Down, 2" on an RF4CE remote to reach the diagnostic display, and then launching a Remote Web Inspector script.

References (1)

[Third Party Advisory] https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-39.arbitrary-file-read.txt

View Writeup ZIP pw:eip

Scores

CVSS v3 4.6

EPSS 0.0006

EPSS Percentile 19.8%

Attack Vector PHYSICAL

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (2)

motorola/mx011anm_firmware

n/a/n/a

Published Jul 31, 2017

Tracked Since Feb 18, 2026