CVE-2017-9491

Published: Jul 31, 2017Modified: May 13, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST); Cisco DPC3941T (firmware version DPC3941_2.5s3_PROD_sey); and Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices does not set the secure flag for cookies in an https session to an administration application, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session.

Affected (6)

Products: Cisco: Dpc3939 Firmware, Dpc3939b Firmware, Dpc3941t Firmware · Commscope: Arris Tg1682g Firmware

3 products

1 product

Arris Tg1682g Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Dpc3939 Firmware	Version dpc3939-p20-18-v303r20421733-160420a-cmcst

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Dpc3939 Firmware	Version dpc3939-p20-18-v303r20421746-170221a-cmcst

Running on/with	Platform Versions
Cisco Dpc3939	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Dpc3939b Firmware	Version dpc3939b-v303r204217-150321a-cmcst

Running on/with	Platform Versions
Cisco Dpc3939b	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Dpc3941t Firmware	Version dpc3941_2.5s3_prod_sey

Running on/with	Platform Versions
Cisco Dpc3941t	All versions

Configuration E

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Commscope Arris Tg1682g Firmware	Version 10.0.132.sip.pc20.ct
Commscope Arris Tg1682g Firmware	Version tg1682_2.2p7s2_prod_sey

Running on/with	Platform Versions
Commscope Arris Tg1682g	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-35.improper-cookie-flags.txt

Source: cve@mitre.org

MitigationThird Party Advisory

https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-35.improper-cookie-flags.txt

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationThird Party Advisory

Timeline

No history available yet.