CVE-2017-9482

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to obtain root access to…

published July 31, 2017

CVSS
—
EPSS
3%
Percentile
84.7
In the wild
Unconfirmed
What it is

⚠️ Remote access to your device is just a TELNET session away! The Comcast firmware on Cisco DPC3939 devices can be exploited, allowing attackers to seize root access with minimal effort. 🔥 Think of it like leaving the front door of your house wide open but only realizing it once someone’s already inside. A TELNET daemon that’s enabled can lead attackers straight to the heart of your device, just like an open invitation to a party nobody wanted to host! If an attacker exploits this vulnerability, they could gain complete control over the Network Processor, leading to data breaches and unauthorized actions on your network. Imagine someone having the ability to snoop on your devices or manipulate your internet traffic — absolutely devastating!

Put simply

Think of it like leaving the front door of your house wide open but only realizing it once someone’s already inside. A TELNET daemon that’s enabled can lead attackers straight to the heart of your device, just like an open invitation to a party nobody wanted to host! This vulnerability allows remote attackers to gain root access by enabling a TELNET daemon on compromised Cisco DPC3939 devices, enabled through a previous vulnerability (CVE-2017-9479). Once they establish a TELNET session, they can execute commands on the underlying Linux system.

What to do

If an attacker exploits this vulnerability, they could gain complete control over the Network Processor, leading to data breaches and unauthorized actions on your network. Imagine someone having the ability to snoop on your devices or manipulate your internet traffic — absolutely devastating! To remediate this issue, disable the TELNET daemon on your Cisco DPC3939 devices immediately. Additionally, ensure your firmware is updated to the latest version provided by your vendor to close this security gap. You've got this! Follow these steps, and you'll have your network fortress back in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02531 · 84.7th percentile
Published
2017-07-31T03:00Z
EPSS history
Timeline
  • 31 JUL 03:00Z
    The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to obtain root access to…
    cvelistv5