CVE-2017-9484
HighSummary
The Comcast firmware on Cisco DPC3939 devices allows remote attackers to discover a CM MAC address by sniffing Wi-Fi traffic and performing simple arithmetic calculations.
Risk Assessment
Attackers may gain access to MAC address information, potentially leading to further attacks on the network or devices.
Recommendation
It is recommended to update the firmware to the latest version and monitor network traffic for unauthorized activities.
Other vulnerabilities in Cisco DPC3939
See all- CVE-2017-9486High
The Comcast firmware on Cisco DPC3939 devices allows remote attackers to compute password-of-the-day values via unspecified vectors.
- CVE-2017-9485High
The Comcast firmware on Cisco DPC3939 devices allows remote attackers to write arbitrary data to a known /var/tmp/sess_* pathname by leveraging the device's operation in UI dev mode.
- CVE-2017-9481High
The Comcast firmware on Cisco DPC3939 devices allows remote attackers to obtain unintended access to the 169.254/16 IP network by adding a routing-table entry that specifies the LAN IP address as the router for that network.
- CVE-2017-9478High
The Comcast firmware on Cisco DPC3939 devices sets the CM MAC address with a two-byte offset from the MTA/VoIP MAC address, allowing remote attackers to discover hidden Home Security Wi-Fi networks.
- CVE-2017-9483Critical
The Comcast firmware on Cisco DPC3939 devices allows Network Processor Linux users to obtain root access to the Application Processor Linux system via shell metacharacters in commands.
- CVE-2017-9482Critical
The Comcast firmware on Cisco DPC3939 devices allows remote attackers to obtain root access to the Network Processor (NP) Linux system by enabling a TELNET daemon and then establishing a TELNET session.
Original NVD description (English source)
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to discover a CM MAC address by sniffing Wi-Fi traffic and performing simple arithmetic calculations.