PT-2017-18968
CVE-2017-9498
·
تاريخ النشر
2017-07-31
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Comcast firmware on Motorola MX011ANM version MX011AN 2.9p6s1 PROD sey
Comcast firmware on Xfinity XR11-20 Voice Remote devices (affected versions not specified)
Description
The issue allows local users to upload arbitrary firmware images to an XR11 device by leveraging root access, due to the lack of a protection mechanism involving digital signatures for the firmware.
Recommendations
For Comcast firmware on Motorola MX011ANM version MX011AN 2.9p6s1 PROD sey, consider restricting root access to prevent arbitrary firmware uploads until a patch is available.
For Comcast firmware on Xfinity XR11-20 Voice Remote devices, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾