Cisco DPC3939 Firmware Information Disclosure Vulnerability

Cisco DPC3939 is a wireless voice gateway product from Cisco USA. A security vulnerability exists in the Cisco DPC3939 firmware. Allows an attacker to communicate with the internal network interface of the Network Processor Atom Linux instance...

Cisco DPC3939 Firmware Information Disclosure Vulnerability (CNVD-2017-27790)

Cisco DPC3939 is a wireless voice gateway product from Cisco USA. The Cisco DPC3939 firmware has a security vulnerability. Allows a remote attacker to discover a hidden home security wi-fi network by exploiting the embedding of DNS hostnames with MTA/VoIP MAC addresses...

Unspecified Vulnerability in Cisco DPC3939 Firmware (CNVD-2017-27792)

Cisco DPC3939 is a wireless voice gateway product from Cisco USA. A security vulnerability exists in the Cisco DPC3939 firmware. A remote attacker hides the SSID and password for a home secured Wi-Fi network...

Comcast Firmware Information Disclosure Vulnerability in Multiple Products

Cisco DPC3939 XB3 and others are wireless home voice gateway products from Cisco USA.Arris TG1682G is a modem product from Arris USA.Comcast is a set of firmware developed by Comcast USA that runs in devices such as gateways and modems. A security vulnerability exists in the Comcast firmware in...

Unspecified Vulnerability in Cisco DPC3939 Firmware

Cisco DPC3939 is a wireless voice gateway product from Cisco USA. A security vulnerability exists in the Cisco DPC3939 firmware. It allows an attacker to obtain the root shell of the gateway's Network Processor Atom Linux instance...

Cisco DPC3939 Firmware Unauthorized Operation Vulnerability

Cisco DPC3939 is a wireless voice gateway product from Cisco USA. A security vulnerability exists in the Cisco DPC3939 firmware. Allows a remote attacker to discover the CM MAC address through an xfinitywifi hotspot connected to the device...

Cisco DPC3939 Firmware Arbitrary File Write Vulnerability

Cisco DPC3939 is a wireless voice gateway product from Cisco USA. A security vulnerability exists in the Cisco DPC3939 firmware. It allows a remote attacker to write arbitrary data to a known /var/tmp/sess path by exploiting the operation of the UI exploit mode device...

Cisco DPC3939 Firmware Unauthorized Access Vulnerability

Cisco DPC3939 is a wireless voice gateway product from Cisco USA. A security vulnerability exists in the Cisco DPC3939 firmware. An attacker accesses the CM MAC of a Comcast customer gateway by sniffing the gateway's Wi-Fi traffic...

Cisco DPC3939 and DPC3941T Comcast Firmware Information Disclosure Vulnerability

The Cisco DPC3939 and DPC3941T are both wireless voice gateway products from Cisco USA. comcast is a set of firmware developed by Comcast USA that runs in devices such as gateways and modems. A security vulnerability exists in the Comcast firmware in the Cisco DPC3939 using the...

Cisco DPC3939 Firmware Arbitrary Command Execution Vulnerability

Cisco DPC3939 is a wireless voice gateway product from Cisco USA. A security vulnerability exists in the Cisco DPC3939 firmware. Allows an attacker to execute arbitrary commands on the Application Processor ARM Linux instance on the gateway...

Cisco DPC3939 Firmware Arbitrary Command Execution Vulnerability (CNVD-2017-27789)

Cisco DPC3939 is a wireless voice gateway product from Cisco USA. Cisco DPC3939 firmware security vulnerability. Allows a remote attacker to execute arbitrary commands by utilizing local network access and connecting to the server's root syseventd, as evidenced by copying configuration data...

Cisco DPC3939 Comcast Firmware Information Disclosure Vulnerability

The Cisco DPC3939 XB3 is a wireless home voice gateway product from Cisco USA.Comcast is a set of firmware developed by Comcast that runs in devices such as gateways and modems. A security vulnerability exists in the Comcast firmware in the Cisco DPC3939 using the...

Code injection

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST and DPC3941T firmware version DPC39412.5s3PRODsey devices allows remote attackers to discover a WAN IPv6 IP address by leveraging knowledge of the CM MAC address...

Default credentials

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to compute password-of-the-day values via unspecified vectors...

CVE-2017-9485

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to write arbitrary data to a known /var/tmp/sess pathname by leveraging the device's operation in UI dev mode...

CVE-2017-9487

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST and DPC3941T firmware version DPC39412.5s3PRODsey devices allows remote attackers to discover a WAN IPv6 IP address by leveraging knowledge of the CM MAC address...

Design/Logic Flaw

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST and DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices sets the CM MAC address to a value with a two-byte offset from the MTA/VoIP MAC address, which indirectly allows remote...

Command injection

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows local users e.g., users who have command access as a consequence of CVE-2017-9479 exploitation to read arbitrary files via UPnP access to /var/IGD/...

CVE-2017-9478

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST and DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices sets the CM MAC address to a value with a two-byte offset from the MTA/VoIP MAC address, which indirectly allows remote...

CVE-2017-9479

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to execute arbitrary commands as root by leveraging local network access and connecting to the syseventd server, as demonstrated by copying configuration data into a...