Cisco DPC3939 Firmware vulnerabilities

16 CVEs affecting Cisco DPC3939 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-9521, published 2017-07-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-9479, published 2017-07-31. Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days. The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to execute arbitrary commands as root by leveraging local network…
CVE-2017-9521, published 2017-07-31. Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days. The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B…
CVE-2017-9482, published 2017-07-31. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to obtain root access to the Network Processor (NP) Linux system by…
CVE-2017-9483, published 2017-07-31. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows Network Processor (NP) Linux users to obtain root access to the Application…
CVE-2017-9476, published 2017-07-31. Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days. The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); and Arris TG1682G…
CVE-2017-9492, published 2017-07-31. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B…
CVE-2017-9486, published 2017-07-31. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to compute password-of-the-day values via unspecified vectors.
CVE-2017-9484, published 2017-07-31. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote…
CVE-2017-9478, published 2017-07-31. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices sets the CM MAC…
CVE-2017-9491, published 2017-07-31. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B…

Latest

CVE-2017-9488, published 2017-07-31. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devices allows remote attackers to access…
CVE-2017-9487, published 2017-07-31. Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days. The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devices allows remote attackers to discover…
CVE-2017-9485, published 2017-07-31. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to write arbitrary data to a known /var/tmp/sess_* pathname by…