CVE-2017-9479

CVE-2017-9479 affects Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST). The issue allows remote attackers on the local network to execute arbitrary commands as root by connecting to the syseventd server and copying configuration data into a readable ...

CVE-2017-9496

CVE-2017-9496 affects Comcast firmware on the Motorola MX011ANM (firmware MX011AN_2.9p6s1_PROD_sey). The vulnerability allows a physically proximate attacker to access the device’s SNMP server by connecting a cable to the Ethernet port and communicating with the device’s link-local IPv6 address. ...

CVE-2017-9496

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows physically proximate attackers to access an SNMP server by connecting a cable to the Ethernet port, and then establishing communication with the device's link-local IPv6 address...

CVE-2017-9521

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST; Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST; Cisco DPC3939B firmware version dpc3939b-v303r204217-150321a-CMCST; Cisco DPC3941T firmware version DPC39412.5s3PRODsey; an...

CVE-2017-9480

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows local users e.g., users who have command access as a consequence of CVE-2017-9479 exploitation to read arbitrary files via UPnP access to /var/IGD/...

CVE-2017-9476

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST; Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST; and Arris TG1682G eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG16822.2p7s2PRODsey devices makes it easy for...

CVE-2017-9492

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST; Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST; Cisco DPC3939B firmware version dpc3939b-v303r204217-150321a-CMCST; Cisco DPC3941T firmware version DPC39412.5s3PRODsey; an...

CVE-2017-9480

The CVE-2017-9480 entry applies to Cisco DPC3939 firmware (version dpc3939-P20-18-v303r20421746-170221a-CMCST). The vulnerability allows local users to read arbitrary files via UPnP access to /var/IGD/ (in the context of users who gained command access through CVE-2017-9479). Affected component/w...

CVE-2017-9483

CVE-2017-9483 affects Cisco DPC3939 family firmware (e.g., dpc3939-P20-18-v303r20421746-170221a-CMCST). The vulnerability enables arbitrary command execution by NP Linux users to gain root access on the AP Linux system through shell metacharacters in commands. The affected product is a Comcast fi...

CVE-2017-9475

Comcast XFINITY WiFi Home Hotspot devices allow remote attackers to spoof the identities of Comcast customers via a forged MAC address...

CVE-2017-9488

The CVE-2017-9488 entry concerns Comcast firmware for Cisco DPC3939 and DPC3941T (dpc3939-P20-18-v303r20421746-170221a-CMCST and DPC3941_2.5s3_PROD_sey). A hardcoded-credentials flaw on the wan0 IPv6 interface allows remote access to the device’s web UI after establishing a session, though this i...

CVE-2017-9481

The CVE-2017-9481 entry describes a vulnerability in Cisco DPC3939 firmware (dpc3939-P20-18-v303r20421746-170221a-CMCST). An attacker can obtain unintended access to the Network Processor’s 169.254/16 IP network by adding a routing-table entry that designates the LAN IP as the router for that net...

CVE-2017-9495

The affected product is Motorola MX011ANM Comcast firmware (MX011AN_2.9p6s1_PROD_sey). A vulnerability allows physically proximate attackers to read arbitrary files by manipulating RF4CE remote input (EXIT, Down, Down, 2) to reach a diagnostic display and trigger a Remote Web Inspector script. Th...

CVE-2017-9476

The CVE-2017-9476 entry concerns Cisco DPC3939 and Arris TG1682G devices (Comcast firmware on Cisco DPC3939 and eMTA/DOCSIS TG1682G) where a vulnerability allows remote attackers to determine the hidden SSID and passphrase of a Home Security Wi‑Fi network. Public detail in connected sources confi...

CVE-2017-9521

The CVE-2017-9521 entry concerns Comcast firmware in Cisco DPC3939/3939B/3941T and Arris TG1682G devices, where a specific exposed service (unnecessarily exposed per note) enables remote code execution. Affected firmware versions are listed for each device. The root cause is an exposed service th...

CVE-2017-9493

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows remote attackers to conduct successful forced-pairing attacks between an RF4CE remote and a set-top box by repeatedly transmitting the same pairing code...

CVE-2017-9478

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST and DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices sets the CM MAC address to a value with a two-byte offset from the MTA/VoIP MAC address, which indirectly allows remote...

CVE-2017-9485

The CVE-2017-9485 entry applies to Cisco DPC3939 firmware (Comcast deployment) and describes a remote arbitrary file-write vulnerability. An attacker can leverage the device’s UI dev mode to write arbitrary data to a known /var/tmp/sess_* pathname. Connected advisories (CNVD-2017-27783, CVE lists...

CVE-2017-9478

The CVE-2017-9478 entry concerns Cisco DPC3939 firmware (dpc3939-P20-18-v303r20421733-160420a-CMCST and dpc3939-P20-18-v303r20421746-170221a-CMCST). The root cause is that the CM MAC address is set to a value with a two-byte offset from the MTA/VoIP MAC address, and this embedding into DNS hostna...

CVE-2017-9486

CVE-2017-9486 affects Cisco DPC3939 devices running the Comcast firmware dpc3939-P20-18-v303r20421746-170221a-CMCST. The published records consistently describe the issue as a vulnerability in the Comcast firmware that allows remote attackers to compute the password-of-the-day (POTD) values via u...