PT-2017-18963 · Motorola · Motorola Mx011Anm

Chris Grayson + 2 · Publicado 2017-07-31 · Atualizado 2019-10-03 · CVE-2017-9493

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Comcast firmware on Motorola MX011ANM version MX011AN 2.9p6s1 PROD sey

Description The issue allows remote attackers to conduct successful forced-pairing attacks between an RF4CE remote and a set-top box by repeatedly transmitting the same pairing code.

Recommendations For Comcast firmware on Motorola MX011ANM version MX011AN 2.9p6s1 PROD sey, consider restricting access to the pairing functionality to minimize the risk of exploitation until a patch is available.

Correção

Identificadores relacionados

CVE-2017-9493

Produtos afetados

Motorola Mx011Anm

Referências · 3

• https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-37.rf4ce-forced-pairing.vendor.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-9493 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-9493 · Aviso do Fabricante