← Back

CVE-2017-9476

nvd nist
Published: Jul 31, 2017Modified: May 13, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); and Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices makes it easy for remote attackers to determine the hidden SSID and passphrase for a Home Security Wi-Fi network.

Affected (4)

Cisco
1 product
Dpc3939 Firmware
Commscope
1 product
Arris Tg1682g Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Dpc3939 Firmware
Version dpc3939-p20-18-v303r20421746-170221a-cmcst
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dpc3939 Firmware
Version dpc3939-p20-18-v303r20421733-160420a-cmcst
Running on/withPlatform Versions
Cisco
Dpc3939
All versions
Configuration C
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Commscope
Arris Tg1682g Firmware
Version 10.0.132.sip.pc20.ct
Arris Tg1682g Firmware
Version tg1682_2.2p7s2_prod_sey
Running on/withPlatform Versions
Commscope
Arris Tg1682g
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.