CVE-2017-9490 The Comcast firmware on Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows configuration changes via CSRF.
HighCVSS 8.8
EPSS 0.52%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Comcast firmware on Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows configuration changes via CSRF.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco dpc3939b firmware | = dpc3939b-v303r204217-150321a-cmcst | No fix listed |
| arris tg1682g firmware | = 10.0.132.sip.pc20.ct | No fix listed |
| arris tg1682g firmware | = tg1682_2.2p7s2_prod_sey | No fix listed |
References
- github.com exploit third-party-advisory