[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fO2dQL1IGaqTiKHDnMglL73Dt64iYGGuWxly4P41tQoc":3,"g5a-risk:CVE-2017-9498":133},{"success":4,"data":5,"meta":131},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":59,"references":60,"referencesCount":68,"weaknesses":69,"weaknessesCount":78,"isActivelyExploited":79,"cisaInfo":15,"otxData":15,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":129,"notableEvents":130},"CVE-2017-9498","What is CVE-2017-9498?","The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for the firmware.","The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload a...","2017-07-31T03:29:00.94","2025-04-20T01:37:25.86",5.5,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",1.8,3.6,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":23,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":35,"AvailabilityImpact":24,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",2.1,3.9,2.9,0.00192,[39,39,39,39,39,39,39],"Medium",[43,48,52,56],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"motorola","mx011anm_firmware","mx011an_2.9p6s1_prod_sey","cpe:2.3:o:motorola:mx011anm_firmware:mx011an_2.9p6s1_prod_sey:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"mx011anm","-","cpe:2.3:h:motorola:mx011anm:-:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":50,"criteria":55,"vulnerable":4},"comcast","xfinity_xr11-20_firmware","cpe:2.3:o:comcast:xfinity_xr11-20_firmware:-:*:*:*:*:*:*:*",{"vendor":53,"product":57,"version":50,"criteria":58,"vulnerable":4},"xfinity_xr11-20","cpe:2.3:h:comcast:xfinity_xr11-20:-:*:*:*:*:*:*:*",4,[61,66],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fgithub.com\u002FBastilleResearch\u002FCableTap\u002Fblob\u002Fmaster\u002Fdoc\u002Fadvisories\u002Fbastille-42.remote-OTA.txt","GitHub",[65],"Third Party Advisory",{"url":62,"source":63,"tags":67},[65],2,[70],{"id":71,"name":72,"description":73,"extendedDescription":74,"status":75,"abstraction":76,"structure":77},"CWE-354","Improper Validation of Integrity Check Value","The product does not validate or incorrectly validates the integrity check values or \"checksums\" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.","Improper validation of checksums before use results in an unnecessary risk that can easily be mitigated. The protocol specification describes the algorithm used for calculating the checksum. It is then a simple matter of implementing the calculation and verifying that the calculated checksum and the received checksum match. Improper verification of the calculated checksum and the received checksum can lead to far greater consequences.","Draft","Base","Simple",1,false,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2017-9498? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-9498, a medium severity cyber security vulnerability from 2017. The Comcast firmware on Motorola MX011ANM (firmware versio...","CVE-2017-9498, CVE-2017-9498 vulnerability, CVE-2017-9498 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, motorola security, comcast security, mx011anm_firmware vulnerability, mx011anm vulnerability, xfinity_xr11-20_firmware vulnerability, xfinity_xr11-20 vulnerability","\u002Fwhat-is\u002Fcve-2017-9498",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-9498","Cybersecurity","CVE-2017-9498, CVE-2017-9498 vulnerability, CVE-2017-9498 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107,119],{"Operator":108,"Negate":15,"Nodes":109},"AND",[110,115],{"Operator":111,"Negate":15,"CPEMatch":112},"OR",[113],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":114,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"7E8281B6-AD0F-4665-AB01-EED113CF62FD",{"Operator":111,"Negate":15,"CPEMatch":116},[117],{"Vulnerable":15,"Criteria":51,"MatchCriteriaID":118,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4BD0633C-147B-43FE-A7D0-38ECEB28F90D",{"Operator":108,"Negate":15,"Nodes":120},[121,125],{"Operator":111,"Negate":15,"CPEMatch":122},[123],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":124,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"7C26C5A3-4C6C-4381-B28E-E71A27B20455",{"Operator":111,"Negate":15,"CPEMatch":126},[127],{"Vulnerable":15,"Criteria":58,"MatchCriteriaID":128,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"2EC523DA-A4A5-4CFA-BE62-73008627037D",[],[],{"lastModified":11,"cacheTime":132,"version":33},1792458529603,{"score":134,"band":135,"action":136,"scoredAt":137},20,"Low","Monitor","2026-10-19T06:54:03.350395+00:00"]