CVE Catalog

CVE-2017-9483

Critical
Published: Translated: NVD NIST

Summary

The Comcast firmware on Cisco DPC3939 devices allows Network Processor Linux users to obtain root access to the Application Processor Linux system via shell metacharacters in commands.

Risk Assessment

Gaining access to the Application Processor Linux system can lead to serious security breaches, including device takeover.

Recommendation

It is recommended to update the firmware to the latest version to mitigate this vulnerability and restrict access to administrative interfaces.

Original NVD description (English source)

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows Network Processor (NP) Linux users to obtain root access to the Application Processor (AP) Linux system via shell metacharacters in commands.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS