CVE-2017-9497

MEDIUM

Motorola MX011ANM - Command Injection

Title source: llm

Description

The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to execute arbitrary commands as root by pulling up the diagnostics menu on the set-top box, and then posting to a Web Inspector route.

References (1)

[Third Party Advisory] https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-41.root-command-execution.txt

View Writeup ZIP pw:eip

Scores

CVSS v3 6.8

EPSS 0.0013

EPSS Percentile 31.8%

Attack Vector PHYSICAL

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-20

Status published

Products (2)

cisco/mx011anm_firmware

n/a/n/a

Published Jul 31, 2017

Tracked Since Feb 18, 2026