Vance 🇧🇸x🇺🇸🏴☠️cyber/acc@VancePoitier
So apparently a lot of Cable Bahamas modems are vulnerable to CVE-2017-9521 and CVE-2017-9476
0000031
204 followersView on X
CVE-2017-9521(cisco / arris_tg1682g)
LOWCVSS 9.8 · CRITICALSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST); Cisco DPC3941T (firmware version DPC3941_2.5s3_PROD_sey); and Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows remote attackers to execute arbitrary code via a specific (but unstated) exposed service. NOTE: the scope of this CVE does NOT include the concept of "Unnecessary Services" in general; the scope is only a single service that is unnecessarily exposed, leading to remote code execution. The details of that service might be disclosed at a later date.
1.0/ 10 priority
Sources & remediation
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- arris_tg1682g
- arris_tg1682g_firmware
- dpc3939
- dpc3939_firmware
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day
Affected systems
Products
arris_tg1682garris_tg1682g_firmwaredpc3939dpc3939_firmwaredpc3939bdpc3939b_firmwaredpc3941tdpc3941t_firmware
7 versions affected across 8 products
Deep dive
Activity timeline1 mentions / 1d
Full discourse1 post
CPE platform detail10 entries
10 of 10 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | cisco | dpc3939 | - | - | - |
| OS | cisco | dpc3939_firmware | dpc3939-p20-18-v303r20421733-160420a-cmcst | - | - |
| OS | cisco | dpc3939_firmware | dpc3939-p20-18-v303r20421746-170221a-cmcst | - | - |
| HW | cisco | dpc3939b | - | - | - |
| OS | cisco | dpc3939b_firmware | dpc3939b-v303r204217-150321a-cmcst | - | - |
| HW | cisco | dpc3941t | - | - | - |
| OS | cisco | dpc3941t_firmware | dpc3941_2.5s3_prod_sey | - | - |
| HW | commscope | arris_tg1682g | - | - | - |
| OS | commscope | arris_tg1682g_firmware | 10.0.132.sip.pc20.ct | - | - |
| OS | commscope | arris_tg1682g_firmware | tg1682_2.2p7s2_prod_sey | - | - |