CVE-2017-9490: Cross-Site Request Forgery (CSRF)

The Comcast firmware on Arris TG1682G eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG16822.2p7s2PRODsey devices allows configuration changes via CSRF...

CVE-2017-9489: Cross-Site Request Forgery (CSRF)

The Comcast firmware on Cisco DPC3939B firmware version dpc3939b-v303r204217-150321a-CMCST devices allows configuration changes via CSRF...

CVE-2017-9493: Undefined Security Weakness

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows remote attackers to conduct successful forced-pairing attacks between an RF4CE remote and a set-top box by repeatedly transmitting the same pairing code...

PT-2017-18953

Name of the Vulnerable Software and Affected Versions Comcast firmware on Cisco DPC3939 version dpc3939-P20-18-v303r20421746-170221a-CMCST Description The issue allows remote attackers to gain unintended access to the Network Processor NP 169.254/16 IP network. This is achieved by adding a...

PT-2017-18960

Name of the Vulnerable Software and Affected Versions Arris TG1682G devices with Comcast firmware, versions 10.0.132.SIP.PC20.CT, software version TG1682 2.2p7s2 PROD sey Description The issue allows configuration changes via CSRF, which can be exploited to make unauthorized changes to the device...

CVE-2017-9497: Improper Input Validation

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows physically proximate attackers to execute arbitrary commands as root by pulling up the diagnostics menu on the set-top box, and then posting to a Web Inspector route...

PT-2017-2836

Name of the Vulnerable Software and Affected Versions Comcast firmware on Cisco DPC3939 version dpc3939-P20-18-v303r20421746-170221a-CMCST Description The issue is related to insufficient access control in the TELNET session of the Comcast firmware on Cisco DPC3939 devices. This allows a remote...

CVE-2017-9483: Improper Neutralization of Special Elements used in an OS Command

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows Network Processor NP Linux users to obtain root access to the Application Processor AP Linux system via shell metacharacters in commands...

PT-2017-18968

Name of the Vulnerable Software and Affected Versions Comcast firmware on Motorola MX011ANM version MX011AN 2.9p6s1 PROD sey Comcast firmware on Xfinity XR11-20 Voice Remote devices affected versions not specified Description The issue allows local users to upload arbitrary firmware images to an...

PT-2017-18965

Name of the Vulnerable Software and Affected Versions Comcast firmware on Motorola MX011ANM version MX011AN 2.9p6s1 PROD sey Description The issue allows physically proximate attackers to read arbitrary files on the device. This can be achieved by pressing a specific sequence of buttons on an RF4...

CVE-2017-9477: Exposure of Sensitive Information to an Unauthorized Actor

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST and DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to discover the CM MAC address by connecting to the device's xfinitywifi hotspot...

CVE-2017-9485: Undefined Security Weakness

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to write arbitrary data to a known /var/tmp/sess pathname by leveraging the device's operation in UI dev mode...

PT-2017-18966

Name of the Vulnerable Software and Affected Versions Comcast firmware on Motorola MX011ANM version MX011AN 2.9p6s1 PROD sey Description The issue allows physically proximate attackers to access an SNMP server by connecting a cable to the Ethernet port and establishing communication with the...

PT-2017-18963

Name of the Vulnerable Software and Affected Versions Comcast firmware on Motorola MX011ANM version MX011AN 2.9p6s1 PROD sey Description The issue allows remote attackers to conduct successful forced-pairing attacks between an RF4CE remote and a set-top box by repeatedly transmitting the same...

CVE-2017-9494: Incorrect Permission Assignment for Critical Resource

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows remote attackers to enable a Remote Web Inspector that is accessible from the public Internet...