CVE-2017-9491

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST; Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST; Cisco DPC3939B firmware version dpc3939b-v303r204217-150321a-CMCST; Cisco DPC3941T firmware version DPC39412.5s3PRODsey; an...

CVE-2017-9490

The Comcast firmware on Arris TG1682G eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG16822.2p7s2PRODsey devices allows configuration changes via CSRF...

CVE-2017-9498

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for...

CVE-2017-9477

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST and DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to discover the CM MAC address by connecting to the device's xfinitywifi hotspot...

CVE-2017-9489

The Comcast firmware on Cisco DPC3939B firmware version dpc3939b-v303r204217-150321a-CMCST devices allows configuration changes via CSRF...

CVE-2017-9478

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST and DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices sets the CM MAC address to a value with a two-byte offset from the MTA/VoIP MAC address, which indirectly allows remote...

CVE-2017-9482

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to obtain root access to the Network Processor NP Linux system by enabling a TELNET daemon through CVE-2017-9479 exploitation and then establishing a TELNET session...

CVE-2017-9486

CVE-2017-9486 affects Cisco DPC3939 devices running the Comcast firmware dpc3939-P20-18-v303r20421746-170221a-CMCST. The published records consistently describe the issue as a vulnerability in the Comcast firmware that allows remote attackers to compute the password-of-the-day (POTD) values via u...

CVE-2017-9493

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows remote attackers to conduct successful forced-pairing attacks between an RF4CE remote and a set-top box by repeatedly transmitting the same pairing code...

CVE-2017-9486

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to compute password-of-the-day values via unspecified vectors...

CVE-2017-9488

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST and DPC3941T firmware version DPC39412.5s3PRODsey devices allows remote attackers to access the web UI by establishing a session to the wan0 WAN IPv6 address and then entering unspecified hardcoded...

CVE-2017-9521

The CVE-2017-9521 entry concerns Comcast firmware in Cisco DPC3939/3939B/3941T and Arris TG1682G devices, where a specific exposed service (unnecessarily exposed per note) enables remote code execution. Affected firmware versions are listed for each device. The root cause is an exposed service th...

CVE-2017-9485

The CVE-2017-9485 entry applies to Cisco DPC3939 firmware (Comcast deployment) and describes a remote arbitrary file-write vulnerability. An attacker can leverage the device’s UI dev mode to write arbitrary data to a known /var/tmp/sess_* pathname. Connected advisories (CNVD-2017-27783, CVE lists...

CVE-2017-9478

The CVE-2017-9478 entry concerns Cisco DPC3939 firmware (dpc3939-P20-18-v303r20421733-160420a-CMCST and dpc3939-P20-18-v303r20421746-170221a-CMCST). The root cause is that the CM MAC address is set to a value with a two-byte offset from the MTA/VoIP MAC address, and this embedding into DNS hostna...

CVE-2017-9493

Summary: CVE-2017-9493 affects Comcast firmware on Motorola MX011ANM devices (firmware MX011AN_2.9p6s1_PROD_sey). A design/implementation issue in the RF4CE pairing flow allows remote attackers to perform successful forced-pairing attacks by repeatedly transmitting the same pairing code between a...

CVE-2017-9489

The CVE-2017-9489 entry concerns the Comcast firmware running on Cisco DPC3939B devices (firmware version dpc3939b-v303r204217-150321a-CMCST). Public documentation in CNVD/NVD confirms a Cross-Site Request Forgery (CSRF) vulnerability that enables configuration changes on affected devices. The ex...

CVE-2017-9494

The CVE-2017-9494 issue affects Comcast firmware on Motorola MX011ANM devices (firmware MX011AN_2.9p6s1_PROD_sey). The root concern is that a remote attacker can enable the Remote Web Inspector, which becomes accessible from the public Internet. Public details describe the device class and firmwa...

CVE-2017-9497

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows physically proximate attackers to execute arbitrary commands as root by pulling up the diagnostics menu on the set-top box, and then posting to a Web Inspector route...

CVE-2017-9475

CVE-2017-9475 affects Comcast XFINITY WiFi Home Hotspot devices. It describes a remote‑level vulnerability where an attacker can spoof the identities of Comcast customers by forging MAC addresses. The available description does not specify the exact component, firmware version, or root cause beyo...

CVE-2017-9497

The CVE-2017-9497 entry concerns Comcast firmware on Motorola MX011ANM devices (firmware MX011AN_2.9p6s1_PROD_sey). Affected component is the device firmware exposed via the diagnostics Web Inspector route; when a user with physical proximity pulls up the diagnostics menu, an attacker can post to...