Priority MEDIUM 48
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (firmware version dpc3939b-…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03262 · Published 2017-07-31 · No fix listed
Priority MEDIUM 48
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to execute arbitrary commands as root by leveraging local network access and connecting…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03275 · Published 2017-07-31 · No fix listed CWE-732
Priority MEDIUM 47
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to obtain root access to the Network Processor (NP) Linux system by enabling a TELNET da…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02531 · Published 2017-07-31 · No fix listed CWE-732
Priority MEDIUM 46
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows Network Processor (NP) Linux users to obtain root access to the Application Processor (AP) Linux system v…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01867 · Published 2017-07-31 · No fix listed CWE-78
Priority MEDIUM 41
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devices allows remote attackers to access the web UI by establish…
CVSS 3.0HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01273 · Published 2017-07-31 · No fix listed CWE-798
Priority LOW 36
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (firmware version dpc3939b-…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01581 · Published 2017-07-31 · No fix listed CWE-200
Priority LOW 36
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to compute password-of-the-day values via unspecified vectors.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0151 · Published 2017-07-31 · No fix listed CWE-200
Priority LOW 36
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to discover a…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0151 · Published 2017-07-31 · No fix listed CWE-200
Priority LOW 36
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices sets the CM MAC address to a value wit…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0151 · Published 2017-07-31 · No fix listed CWE-200
Priority LOW 35
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to write arbitrary data to a known /var/tmp/sess_* pathname by leveraging the device's o…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0117 · Published 2017-07-31 · No fix listed
Priority LOW 35
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to obtain unintended access to the Network Processor (NP) 169.254/16 IP network by addin…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0117 · Published 2017-07-31 · No fix listed
Priority LOW 32
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); and Arris TG1682G (eMTA&DOCSIS version 10.…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.01703 · Published 2017-07-31 · No fix listed CWE-200
Priority LOW 31
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to discover th…
CVSS 3.0MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.01039 · Published 2017-07-31 · No fix listed CWE-200
Priority LOW 29
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devices allows remote attackers to discover a WAN IPv6 IP address…
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01166 · Published 2017-07-31 · No fix listed CWE-200
Priority LOW 27
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (firmware version dpc3939b-…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01283 · Published 2017-07-31 · No fix listed CWE-200
Priority LOW 25
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows local users (e.g., users who have command access as a consequence of CVE-2017-9479 exploitation) to read…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.004 · Published 2017-07-31 · No fix listed CWE-200