GCVE - cpe:2.3:h:motorola:mx011anm:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:motorola:mx011anm:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Motorola (`7a59928e-a07c-5317-adab-c9b7f35b7f98`)
Product	Mx011Anm (`45fa8e12-24b4-5b6f-b810-072428bf1879`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-9498`	not_vulnerable	2026-06-03 14:37:41.737745	Details available The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for the firmware. Published: 2017-07-31T03:00:00.000Z Updated: 2024-08-05T17:11:01.597Z Open on db.gcve.eu Reference links https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-42.remote-OTA.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9497`	not_vulnerable	2026-06-03 14:37:41.737419	Details available The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to execute arbitrary commands as root by pulling up the diagnostics menu on the set-top box, and then posting to a Web Inspector route. Published: 2017-07-31T03:00:00.000Z Updated: 2024-08-05T17:11:01.593Z Open on db.gcve.eu Reference links https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-41.root-command-execution.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9496`	not_vulnerable	2026-06-03 14:37:41.737094	Details available The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to access an SNMP server by connecting a cable to the Ethernet port, and then establishing communication with the device's link-local IPv6 address. Published: 2017-07-31T03:00:00.000Z Updated: 2024-08-05T17:11:01.616Z Open on db.gcve.eu Reference links https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-40.ethernet-snmp.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9495`	not_vulnerable	2026-06-03 14:37:41.736751	Details available The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to read arbitrary files by pressing "EXIT, Down, Down, 2" on an RF4CE remote to reach the diagnostic display, and then launching a Remote Web Inspector script. Published: 2017-07-31T03:00:00.000Z Updated: 2024-08-05T17:11:01.898Z Open on db.gcve.eu Reference links https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-39.arbitrary-file-read.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9494`	not_vulnerable	2026-06-03 14:37:41.736367	Details available The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows remote attackers to enable a Remote Web Inspector that is accessible from the public Internet. Published: 2017-07-31T03:00:00.000Z Updated: 2024-08-05T17:11:01.618Z Open on db.gcve.eu Reference links https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-38.remote-web-inspector.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9493`	not_vulnerable	2026-06-03 14:37:41.735093	Details available The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows remote attackers to conduct successful forced-pairing attacks (between an RF4CE remote and a set-top box) by repeatedly transmitting the same pairing code. Published: 2017-07-31T03:00:00.000Z Updated: 2024-08-05T17:11:01.773Z Open on db.gcve.eu Reference links https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-37.rf4ce-forced-pairing.vendor.txt	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.