CVE-2017-9488
High
Description
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devices allows remote attackers to access the web UI by establishing a session to the wan0 WAN IPv6 address and then entering unspecified hardcoded credentials. This wan0 interface cannot be accessed from the public Internet.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Cisco Dpc3939 Firmware
PublishedJul 31, 2017
First seenJul 31, 2017
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco dpc3939_firmware | dpc3939-p20-18-v303r20421746-170221a-cmcst | — |
| cisco dpc3941t_firmware | dpc3941_2.5s3_prod_sey | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.