Arbitrary File Read Vulnerability in Motorola MX011ANM Firmware by Comcast

CVE-2017-9495

Summary

The firmware for Motorola MX011ANM devices from Comcast is susceptible to an arbitrary file read vulnerability. This occurs when an attacker, physically close to the device, employs a specific sequence of commands through an RF4CE remote. By executing 'EXIT, Down, Down, 2', they gain access to the diagnostic display, enabling them to run a Remote Web Inspector script. This flaw could allow unauthorized access to sensitive system files, potentially compromising the device's security and user privacy.

References