← Back

Comcast

comcast

4 CVEs • 5 products

Products (5)

Click to collapse
Toggle
Xfinity Constant Guard Mobile
xfinity_constant_guard_mobile
1 CVE
Xfinity Home Security System
xfinity_home_security_system
1 CVE
Xfinity Wifi Hotspot
xfinity_wifi_hotspot
1 CVE
Xfinity Xr11 20 Firmware
xfinity_xr11-20_firmware
1 CVE
Xfinity Xr11 20
xfinity_xr11-20
0 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-9498
2Comcast
Motorola
2Mx011anm Firmware
Xfinity Xr11 20 Firmware
May 13, 2026
Jul 31, 2017
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access....Show more
The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for the firmware.Show less
CVE-2017-9475
1Comcast
1Xfinity Wifi Hotspot
May 13, 2026
Jul 31, 2017
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
Comcast XFINITY WiFi Home Hotspot devices allow remote attackers to spoof the identities of Comcast customers via a forged MAC address.
CVE-2016-2398
1Comcast
1Xfinity Home Security System
May 6, 2026
Feb 17, 2016
N/A· v4
6.5 MEDIUM· v3
3.3 LOW· v2
Comcast XFINITY Home Security System does not properly maintain base-station communication, which allows physically proximate attackers to defeat sensor functionality by interfering with ZigBee 2.4 GHz transmissions.
CVE-2014-5747
1Comcast
1Xfinity Constant Guard Mobile
May 6, 2026
Sep 9, 2014
N/A· v4
N/A· v3
5.4 MEDIUM· v2
The XFINITY Constant Guard Mobile (aka com.whitesky.mobile.android) application 3.1.140603 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and ob...Show more
The XFINITY Constant Guard Mobile (aka com.whitesky.mobile.android) application 3.1.140603 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.Show less