CVE-2017-9487

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devices allows remote attackers to discover a WAN IPv6 IP address by leveraging knowledge of the CM MAC address.

Score

CVSS 3.0 5.9 Medium

Status

Modified - cve@mitre.org

Published

2017-07-31

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Dpc3939 Firmware (Cisco)
• Dpc3941t Firmware (Cisco)

References

• https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-30.wan0-ipv6-cm-mac.txt