CVE Catalog

CVE-2017-9482

Critical
Published: Translated: NVD NIST

Summary

The Comcast firmware on Cisco DPC3939 devices allows remote attackers to obtain root access to the Network Processor (NP) Linux system by enabling a TELNET daemon and then establishing a TELNET session.

Risk Assessment

Attackers can gain full access to the system, potentially leading to serious security breaches and data loss within the organization.

Recommendation

It is recommended to disable the TELNET daemon and update the firmware to the latest version to minimize risk.

Original NVD description (English source)

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to obtain root access to the Network Processor (NP) Linux system by enabling a TELNET daemon (through CVE-2017-9479 exploitation) and then establishing a TELNET session.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS