← Back

CVE-2017-9477

nvd nist
Published: Jul 31, 2017Modified: May 13, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to discover the CM MAC address by connecting to the device's xfinitywifi hotspot.

Affected (2)

Cisco
1 product
Dpc3939 Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Dpc3939 Firmware
Version dpc3939-p20-18-v303r20421746-170221a-cmcst
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dpc3939 Firmware
Version dpc3939-p20-18-v303r20421733-160420a-cmcst
Running on/withPlatform Versions
Cisco
Dpc3939
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: cve@mitre.org
ExploitMitigationThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitMitigationThird Party Advisory

Timeline

No history available yet.