Security readout for executives and security teams
Plain-English summary
This CVE describes a file-read weakness in specific Comcast firmware for Motorola MX011ANM devices. A person near the device with an RF4CE remote could reach a diagnostic interface and use Remote Web Inspector behavior to read arbitrary files. The public record does not provide a CVSS score, patch status, or evidence of active exploitation.
Executive priority
Prioritize this for legacy-device inventory and physical-access control, not emergency internet-facing response. The vulnerability can expose device files, but the public evidence points to a specific older firmware and requires proximity. Replacement or confirmed vendor remediation is the cleanest path if affected assets remain deployed.
Technical view
CVE-2017-9495 affects Motorola MX011ANM devices running Comcast firmware version MX011AN_2.9p6s1_PROD_sey, according to the CVE description. The issue is an arbitrary file read reachable through a physical-proximity diagnostic path and Remote Web Inspector script execution. Public metadata lists no CWE, CPE, CVSS vector, or named fix.
Likely exposure
Exposure appears limited to organizations or environments still operating the named Motorola MX011ANM devices with the specified Comcast firmware. Risk is higher where devices are physically accessible to untrusted people, such as shared, public, customer-facing, or unmanaged locations.
Exploitation context
The source material describes a physically proximate attack path, not remote internet exploitation. CISA KEV status is false in the provided bundle, and no cited source in the bundle states active exploitation. The exact business impact depends on file contents accessible on the affected device.
Researcher notes
The record is sparse: no CVSS, CWE, CPE, exploit-in-the-wild evidence, or patch details are present in the provided bundle. Analysis should stay anchored to the named device and firmware. Avoid generalizing to other Comcast, Motorola, or RF4CE products without separate evidence.
Mitigation direction
- Inventory Motorola MX011ANM devices and record firmware versions.
- Check Comcast, Motorola, or operator guidance for firmware updates or replacement advice.
- Restrict physical access to affected devices and paired remotes.
- Remove or replace unsupported affected devices where updates are unavailable.
- Treat exposed diagnostic functionality as an operational risk.
Validation and detection
- Confirm whether any Motorola MX011ANM devices remain in service.
- Compare firmware against MX011AN_2.9p6s1_PROD_sey.
- Review whether devices are physically accessible to untrusted users.
- Check vendor or operator records for remediation guidance.
- Document compensating controls for locations where replacement is delayed.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2017-9495 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-39.arbitrary-file-read.txtCVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.