PT-2017-18963 · Motorola · Motorola Mx011Anm

Chris Grayson + 2 · Published 2017-07-31 · Updated 2019-10-03 · CVE-2017-9493

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Comcast firmware on Motorola MX011ANM version MX011AN 2.9p6s1 PROD sey

Description The issue allows remote attackers to conduct successful forced-pairing attacks between an RF4CE remote and a set-top box by repeatedly transmitting the same pairing code.

Recommendations For Comcast firmware on Motorola MX011ANM version MX011AN 2.9p6s1 PROD sey, consider restricting access to the pairing functionality to minimize the risk of exploitation until a patch is available.

Fix

Related Identifiers

CVE-2017-9493

Affected Products

Motorola Mx011Anm

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-9493 · Security Note
• https://osv.dev/vulnerability/CVE-2017-9493 · Vendor Advisory
• https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-37.rf4ce-forced-pairing.vendor.txt · Note