CVE-2017-9485

2017-07-30T23:29:00
ID CVE-2017-9485
Type cve
Reporter NVD
Modified 2017-08-02T10:20:23

Description

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to write arbitrary data to a known /var/tmp/sess_* pathname by leveraging the device's operation in UI dev mode.