CVE-2017-9497
The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to execute arbitrary commands as root by pulling up the diagnostics menu on the set-top box, and then posting to a Web Inspector route.
- Score
- CVSS 3.0 6.8 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2017-07-31
- Last modified
- 2024-08-05
- Weaknesses
- CWE-20
Affected products
References
- https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-41.root-command-execution.txt
