CVE-2017-9490

The Comcast firmware on Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows configuration changes via CSRF.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:cisco:dpc3939b_firmware:dpc3939b-v303r204217-150321a-cmcst:*:*:*:*:*:*:*
cpe:2.3:h:cisco:dpc3939b:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:arris:tg1682g_firmware:10.0.132.sip.pc20.ct:*:*:*:*:*:*:*
cpe:2.3:o:arris:tg1682g_firmware:tg1682_2.2p7s2_prod_sey:*:*:*:*:*:*:*
cpe:2.3:h:commscope:arris_tg1682g:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-07-31 03:29

Updated : 2024-02-28 16:04


NVD link : CVE-2017-9490

Mitre link : CVE-2017-9490

CVE.ORG link : CVE-2017-9490


JSON object : View

Products Affected

cisco

  • dpc3939b
  • dpc3939b_firmware

commscope

  • arris_tg1682g

arris

  • tg1682g_firmware
CWE
CWE-352

Cross-Site Request Forgery (CSRF)