CVE Catalog
CVE-2017-9479
CriticalSummary
The Comcast firmware on Cisco DPC3939 devices allows remote attackers to execute arbitrary commands as root by leveraging local network access and connecting to the syseventd server.
Risk Assessment
Attackers can gain full control over the device, potentially leading to serious security breaches within the local network.
Recommendation
It is recommended to update the firmware to the latest version and restrict local network access to trusted users.
Original NVD description (English source)
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to execute arbitrary commands as root by leveraging local network access and connecting to the syseventd server, as demonstrated by copying configuration data into a readable filesystem.