What is the severity of CVE-2017-9491?

CVE-2017-9491 has a severity rating that indicates it poses a risk due to improper cookie handling.

How do I fix CVE-2017-9491?

To fix CVE-2017-9491, upgrade the firmware versions of affected devices to the latest available updates.

Which devices are impacted by CVE-2017-9491?

CVE-2017-9491 affects Cisco DPC3939, Cisco DPC3939B, and Cisco DPC3941T with specific firmware versions.

What is the impact of CVE-2017-9491 on network security?

CVE-2017-9491 can lead to potential security risks such as unauthorized access or session hijacking due to improper cookie flags.

Is CVE-2017-9491 a local or remote vulnerability?

CVE-2017-9491 is considered a remote vulnerability that can be exploited over the network.

Vulnerability/
CVE-2017-9491

medium

5.3

CWE

200

31/7/2017

13/9/2021

CVE-2017-9491: Infoleak

First published: Mon Jul 31 2017(Updated: )

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST); Cisco DPC3941T (firmware version DPC3941_2.5s3_PROD_sey); and Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices does not set the secure flag for cookies in an https session to an administration application, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Cisco Dpc3939 Firmware	=dpc3939-p20-18-v303r20421733-160420a-cmcst
Cisco DPC3939
Cisco Dpc3939 Firmware	=dpc3939-p20-18-v303r20421746-170221a-cmcst
Cisco Dpc3939b Firmware	=dpc3939b-v303r204217-150321a-cmcst
Cisco DPC3939B
Cisco Dpc3941t Firmware	=dpc3941_2.5s3_prod_sey
Cisco DPC3941T
Commscope Arris Tg1682g Firmware	=10.0.132.sip.pc20.ct
Commscope Arris Tg1682g Firmware	=tg1682_2.2p7s2_prod_sey
Commscope Arris Tg1682g

Never miss a vulnerability like this again

Reference Links

https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-35.improper-cookie-flags.txt

Frequently Asked Questions

What is the severity of CVE-2017-9491?
CVE-2017-9491 has a severity rating that indicates it poses a risk due to improper cookie handling.
How do I fix CVE-2017-9491?
To fix CVE-2017-9491, upgrade the firmware versions of affected devices to the latest available updates.
Which devices are impacted by CVE-2017-9491?
CVE-2017-9491 affects Cisco DPC3939, Cisco DPC3939B, and Cisco DPC3941T with specific firmware versions.
What is the impact of CVE-2017-9491 on network security?
CVE-2017-9491 can lead to potential security risks such as unauthorized access or session hijacking due to improper cookie flags.
Is CVE-2017-9491 a local or remote vulnerability?
CVE-2017-9491 is considered a remote vulnerability that can be exploited over the network.

collector/nvd-index
agent/references
agent/tags
agent/event
agent/weakness
agent/severity
agent/author
agent/description
agent/type
agent/softwarecombine
agent/last-modified-date
agent/first-publish-date
vendor/cisco
canonical/cisco dpc3939 firmware
version/cisco dpc3939 firmware/dpc3939-p20-18-v303r20421733-160420a-cmcst
canonical/cisco dpc3939
version/cisco dpc3939 firmware/dpc3939-p20-18-v303r20421746-170221a-cmcst
canonical/cisco dpc3939b firmware
version/cisco dpc3939b firmware/dpc3939b-v303r204217-150321a-cmcst
canonical/cisco dpc3939b
canonical/cisco dpc3941t firmware
version/cisco dpc3941t firmware/dpc3941_2.5s3_prod_sey
canonical/cisco dpc3941t
vendor/commscope
canonical/commscope arris tg1682g firmware
version/commscope arris tg1682g firmware/10.0.132.sip.pc20.ct
version/commscope arris tg1682g firmware/tg1682_2.2p7s2_prod_sey
canonical/commscope arris tg1682g

Frequently Asked Questions

What is the severity of CVE-2017-9491?
CVE-2017-9491 has a severity rating that indicates it poses a risk due to improper cookie handling.
How do I fix CVE-2017-9491?
To fix CVE-2017-9491, upgrade the firmware versions of affected devices to the latest available updates.
Which devices are impacted by CVE-2017-9491?
CVE-2017-9491 affects Cisco DPC3939, Cisco DPC3939B, and Cisco DPC3941T with specific firmware versions.
What is the impact of CVE-2017-9491 on network security?
CVE-2017-9491 can lead to potential security risks such as unauthorized access or session hijacking due to improper cookie flags.
Is CVE-2017-9491 a local or remote vulnerability?
CVE-2017-9491 is considered a remote vulnerability that can be exploited over the network.

CVE-2017-9491: Infoleak

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2017-9491?

How do I fix CVE-2017-9491?

Which devices are impacted by CVE-2017-9491?

What is the impact of CVE-2017-9491 on network security?

Is CVE-2017-9491 a local or remote vulnerability?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2017-9491?

How do I fix CVE-2017-9491?

Which devices are impacted by CVE-2017-9491?

What is the impact of CVE-2017-9491 on network security?

Is CVE-2017-9491 a local or remote vulnerability?