← Back

CVE-2017-9478

nvd nist
Published: Jul 31, 2017Modified: May 13, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices sets the CM MAC address to a value with a two-byte offset from the MTA/VoIP MAC address, which indirectly allows remote attackers to discover hidden Home Security Wi-Fi networks by leveraging the embedding of the MTA/VoIP MAC address into the DNS hostname.

Affected (2)

Cisco
1 product
Dpc3939 Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Dpc3939 Firmware
Version dpc3939-p20-18-v303r20421746-170221a-cmcst
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dpc3939 Firmware
Version dpc3939-p20-18-v303r20421733-160420a-cmcst
Running on/withPlatform Versions
Cisco
Dpc3939
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.