What is the severity of CVE-2017-9488?

CVE-2017-9488 is considered a high severity vulnerability due to the potential for remote unauthorized access to sensitive interfaces.

How do I fix CVE-2017-9488?

To fix CVE-2017-9488, update the firmware of affected Cisco DPC3939 and DPC3941T devices to the latest version provided by Cisco.

What is the nature of the vulnerability in CVE-2017-9488?

CVE-2017-9488 allows remote attackers to access the web user interface by exploiting session management flaws to connect to the wan0 WAN IPv6 address.

Can I mitigate CVE-2017-9488 without a firmware update?

Mitigation for CVE-2017-9488 without a firmware update is limited, but ensuring strong network security practices can help reduce risk.

Vulnerability/
CVE-2017-9488

high

8.8

CWE

798

31/7/2017

2/8/2017

CVE-2017-9488

First published: Mon Jul 31 2017(Updated: )

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devices allows remote attackers to access the web UI by establishing a session to the wan0 WAN IPv6 address and then entering unspecified hardcoded credentials. This wan0 interface cannot be accessed from the public Internet.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Cisco Dpc3939 Firmware	=dpc3939-p20-18-v303r20421746-170221a-cmcst
Cisco DPC3939
Cisco Dpc3941t Firmware	=dpc3941_2.5s3_prod_sey
Cisco DPC3941T

Never miss a vulnerability like this again

Reference Links

https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-31.stb-remote-webui.txt

Frequently Asked Questions

What is the severity of CVE-2017-9488?
CVE-2017-9488 is considered a high severity vulnerability due to the potential for remote unauthorized access to sensitive interfaces.
How do I fix CVE-2017-9488?
To fix CVE-2017-9488, update the firmware of affected Cisco DPC3939 and DPC3941T devices to the latest version provided by Cisco.
What devices are affected by CVE-2017-9488?
CVE-2017-9488 affects Cisco DPC3939 boards running firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST and Cisco DPC3941T boards running firmware version DPC3941_2.5s3_PROD_sey.
What is the nature of the vulnerability in CVE-2017-9488?
CVE-2017-9488 allows remote attackers to access the web user interface by exploiting session management flaws to connect to the wan0 WAN IPv6 address.
Can I mitigate CVE-2017-9488 without a firmware update?
Mitigation for CVE-2017-9488 without a firmware update is limited, but ensuring strong network security practices can help reduce risk.

agent/author
agent/description
agent/event
agent/first-publish-date
agent/last-modified-date
agent/references
agent/severity
agent/softwarecombine
agent/tags
agent/type
agent/weakness
collector/nvd-index
vendor/cisco
canonical/cisco dpc3939 firmware
version/cisco dpc3939 firmware/dpc3939-p20-18-v303r20421746-170221a-cmcst
canonical/cisco dpc3939
canonical/cisco dpc3941t firmware
version/cisco dpc3941t firmware/dpc3941_2.5s3_prod_sey
canonical/cisco dpc3941t

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2017-9488?
CVE-2017-9488 is considered a high severity vulnerability due to the potential for remote unauthorized access to sensitive interfaces.
How do I fix CVE-2017-9488?
To fix CVE-2017-9488, update the firmware of affected Cisco DPC3939 and DPC3941T devices to the latest version provided by Cisco.
What devices are affected by CVE-2017-9488?
CVE-2017-9488 affects Cisco DPC3939 boards running firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST and Cisco DPC3941T boards running firmware version DPC3941_2.5s3_PROD_sey.
What is the nature of the vulnerability in CVE-2017-9488?
CVE-2017-9488 allows remote attackers to access the web user interface by exploiting session management flaws to connect to the wan0 WAN IPv6 address.
Can I mitigate CVE-2017-9488 without a firmware update?
Mitigation for CVE-2017-9488 without a firmware update is limited, but ensuring strong network security practices can help reduce risk.

CVE-2017-9488

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2017-9488?

How do I fix CVE-2017-9488?

What devices are affected by CVE-2017-9488?

What is the nature of the vulnerability in CVE-2017-9488?

Can I mitigate CVE-2017-9488 without a firmware update?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2017-9488?

How do I fix CVE-2017-9488?

What devices are affected by CVE-2017-9488?

What is the nature of the vulnerability in CVE-2017-9488?

Can I mitigate CVE-2017-9488 without a firmware update?