The Comcast firmware on Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows configuration changes via CSRF.
References
Link | Resource |
---|---|
https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-33.cross-site-request-forgery.txt | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
History
No history.
Information
Published : 2017-07-31 03:29
Updated : 2024-02-28 16:04
NVD link : CVE-2017-9490
Mitre link : CVE-2017-9490
CVE.ORG link : CVE-2017-9490
JSON object : View
Products Affected
cisco
- dpc3939b
- dpc3939b_firmware
commscope
- arris_tg1682g
arris
- tg1682g_firmware
CWE
CWE-352
Cross-Site Request Forgery (CSRF)