CVE Catalog

CVE-2017-11502

Critical
Published: Translated: NVD NIST

Summary

Technicolor DPC3928AD DOCSIS devices allow remote attackers to read arbitrary files via a request starting with 'GET /../' on TCP port 4321.

Risk Assessment

Attackers may gain access to sensitive data, potentially leading to privacy breaches and security risks for the organization.

Recommendation

It is recommended to block access to TCP port 4321 and implement appropriate security measures to prevent unauthorized access to the system.

Original NVD description (English source)

Technicolor DPC3928AD DOCSIS devices allow remote attackers to read arbitrary files via a request starting with "GET /../" on TCP port 4321.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS