CVE-2017-9479: cisco dpc3939_firmware

Vulnerability summary

CVE-2017-9479 is a high (CVSS 10.0) vulnerability in cisco dpc3939_firmware. EPSS estimates a 3.28% chance of exploitation in the next 30 days, higher than 88.3% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 31-07-2017
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to execute arbitrary commands as root by leveraging local network access and connecting to the syseventd server, as demonstrated by copying configuration data into a readable filesystem.

• CWE-732Incorrect Permission Assignment for Critical ResourceThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.