CVE Feed

    Dashboard / CVE / CVE-2017-9488

    CVE-2017-9488

    The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devices allows remote attackers to access the web UI by establishing a session to the wan0 WAN IPv6 address and then entering unspecified hardcoded credentials. This wan0 interface cannot be accessed from the public Internet.

    Published:Jul 31, 2017
    Last Modified:Apr 20, 2025
    EPS:Jul 31, 2017
    EPSS Score:0.00296
    CVSS Score:8.8

    Affected Products

    Vendor
    Cisco
    Product
    Dpc3939
    Vendor
    Cisco
    Product
    Dpc3939 Firmware
    Vendor
    Cisco
    Product
    Dpc3941t
    Vendor
    Cisco
    Product
    Dpc3941t Firmware

    Exploits

    https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-31.stb-remote-webui.txthttps://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-31.stb-remote-webui.txt

    Common Weakness Enumeration

    CWE-798 Use of Hard-coded Credentials

    Related CVEs

    CVE-2017-9476 (CVSS 6.5) — The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC…
    CVE-2017-9487 (CVSS 5.9) — The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC394…
    CVE-2017-9491 (CVSS 5.3) — The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC…
    CVE-2017-9477 (CVSS 6.5) — The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC393…
    CVE-2017-9479 (CVSS 9.8) — The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices al…
    CVE-2017-9482 (CVSS 9.8) — The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices al…
    CVE-2017-9483 (CVSS 9.8) — The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices al…
    CVE-2017-9484 (CVSS 7.5) — The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC393…
    CVE-2017-9485 (CVSS 7.5) — The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices al…
    CVE-2017-9486 (CVSS 7.5) — The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices al…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High