CVE-2017-9477

MEDIUM

Comcast Cisco DPC3939 - Info Disclosure

Title source: llm

Description

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to discover the CM MAC address by connecting to the device's xfinitywifi hotspot.

References (1)

[Exploit, Mitigation, Third Party Advisory] https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-19.wifi-dhcp-cm-mac-leak.txt

View Exploit ZIP pw:eip

Scores

CVSS v3 6.5

EPSS 0.0016

EPSS Percentile 36.3%

Attack Vector ADJACENT_NETWORK

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (3)

cisco/dpc3939_firmware

n/a/n/a

Published Jul 31, 2017

Tracked Since Feb 18, 2026