CVE-2017-9496

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows physically proximate attackers to access an SNMP server by connecting a cable to the Ethernet port, and then establishing communication with the device's link-local IPv6 address...

CVE-2017-9475

Comcast XFINITY WiFi Home Hotspot devices allow remote attackers to spoof the identities of Comcast customers via a forged MAC address...

CVE-2017-9476

The CVE-2017-9476 entry concerns Cisco DPC3939 and Arris TG1682G devices (Comcast firmware on Cisco DPC3939 and eMTA/DOCSIS TG1682G) where a vulnerability allows remote attackers to determine the hidden SSID and passphrase of a Home Security Wi‑Fi network. Public detail in connected sources confi...

CVE-2017-9495

The affected product is Motorola MX011ANM Comcast firmware (MX011AN_2.9p6s1_PROD_sey). A vulnerability allows physically proximate attackers to read arbitrary files by manipulating RF4CE remote input (EXIT, Down, Down, 2) to reach a diagnostic display and trigger a Remote Web Inspector script. Th...

CVE-2017-9488

The CVE-2017-9488 entry concerns Comcast firmware for Cisco DPC3939 and DPC3941T (dpc3939-P20-18-v303r20421746-170221a-CMCST and DPC3941_2.5s3_PROD_sey). A hardcoded-credentials flaw on the wan0 IPv6 interface allows remote access to the device’s web UI after establishing a session, though this i...

CVE-2017-9498

The CVE-2017-9498 entry affects Comcast firmware on Motorola MX011ANM and Xfinity XR11-20 Voice Remote, where there is no digital-signature protection for firmware updates. This allows a local attacker with root access to upload arbitrary firmware images to the XR11, as described in the vulnerabi...

CVE-2017-9483

CVE-2017-9483 affects Cisco DPC3939 family firmware (e.g., dpc3939-P20-18-v303r20421746-170221a-CMCST). The vulnerability enables arbitrary command execution by NP Linux users to gain root access on the AP Linux system through shell metacharacters in commands. The affected product is a Comcast fi...

CVE-2017-9521

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST; Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST; Cisco DPC3939B firmware version dpc3939b-v303r204217-150321a-CMCST; Cisco DPC3941T firmware version DPC39412.5s3PRODsey; an...

CVE-2017-9476

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST; Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST; and Arris TG1682G eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG16822.2p7s2PRODsey devices makes it easy for...

CVE-2017-9480

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows local users e.g., users who have command access as a consequence of CVE-2017-9479 exploitation to read arbitrary files via UPnP access to /var/IGD/...

CVE-2017-9479

CVE-2017-9479 affects Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST). The issue allows remote attackers on the local network to execute arbitrary commands as root by connecting to the syseventd server and copying configuration data into a readable ...

CVE-2017-9481

The CVE-2017-9481 entry describes a vulnerability in Cisco DPC3939 firmware (dpc3939-P20-18-v303r20421746-170221a-CMCST). An attacker can obtain unintended access to the Network Processor’s 169.254/16 IP network by adding a routing-table entry that designates the LAN IP as the router for that net...

CVE-2017-9480

The CVE-2017-9480 entry applies to Cisco DPC3939 firmware (version dpc3939-P20-18-v303r20421746-170221a-CMCST). The vulnerability allows local users to read arbitrary files via UPnP access to /var/IGD/ (in the context of users who gained command access through CVE-2017-9479). Affected component/w...

CVE-2017-9492

The CVE-2017-9492 issue affects Comcast firmware on Cisco DPC3939 (several builds), Cisco DPC3939B, Cisco DPC3941T, and Arris TG1682G devices, where the Set-Cookie header in administration applications omits the HTTPOnly flag. This omissions enables script access to cookies, potentially exposing ...

CVE-2017-9484

CVE-2017-9484 affects Cisco DPC3939 firmware (dpc3939-P20-18-v303r20421733-160420a-CMCST and dpc3939-P20-18-v303r20421746-170221a-CMCST). The issue allows remote attackers to discover a CM MAC address by sniffing Wi‑Fi traffic and performing simple arithmetic calculations. Root cause is exposure ...

CVE-2017-9490

CVE-2017-9490 concerns the Comcast firmware in Arris TG1682G (eMTA&DOCSIS 10.0.132.SIP.PC20.CT; TG1682_2.2p7s2_PROD_sey). The connected CNVD entry describes a Cross-Site Request Forgery (CSRF) vulnerability that enables a remote attacker to change device configuration via the firmware. The issue ...

CVE-2017-9483

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows Network Processor NP Linux users to obtain root access to the Application Processor AP Linux system via shell metacharacters in commands...

CVE-2017-9487

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST and DPC3941T firmware version DPC39412.5s3PRODsey devices allows remote attackers to discover a WAN IPv6 IP address by leveraging knowledge of the CM MAC address...

CVE-2017-9481

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to obtain unintended access to the Network Processor NP 169.254/16 IP network by adding a routing-table entry that specifies the LAN IP address as the router for that...

CVE-2017-9482

The CVE-2017-9482 entry concerns Cisco DPC3939 firmware (dpc3939-P20-18-v303r20421746-170221a-CMCST). Public records (NVD/CNVD entries) describe remote root access of the Network Processor Linux by enabling a TELNET daemon (via CVE-2017-9479) and connecting, as well as related issues allowing com...