Cisco DPC3939B Firmware vulnerabilities

5 CVEs affecting Cisco DPC3939B Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-9521, published 2017-07-31.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-9521, published 2017-07-31. Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days. The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B…
• CVE-2017-9492, published 2017-07-31. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B…
• CVE-2017-9491, published 2017-07-31. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B…
• CVE-2017-9489, published 2017-07-31. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. The Comcast firmware on Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST) devices allows configuration changes via CSRF.
• CVE-2017-9490, published 2017-07-31. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. The Comcast firmware on Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows configuration changes via CSRF.