Remote Password Computation Vulnerability in Comcast Firmware for Cisco DPC3939 Devices
CVE-2017-9486

7.5HIGH

Key Information:

Vendor

Cisco
Status
Dpc3939 Firmware
Vendor
CVE Published:
31 July 2017

What is CVE-2017-9486?

The Comcast firmware installed on Cisco DPC3939 devices contains a vulnerability that permits remote attackers to calculate password-of-the-day values through unexplained means. This flaw poses a security risk as it may allow unauthorized personnel to gain access to network controls and exploit sensitive information. The affected firmware version is dpc3939-P20-18-v303r20421746-170221a-CMCST. Users are urged to review security measures to protect their devices against potential exploitation.

References

https://github.com/BastilleResearch/CableTap/blob/master/...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.