PT-2017-18952
CVE-2017-9480
·
تاريخ النشر
2017-07-31
·
تاريخ التحديث
2017-08-02
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Cisco DPC3939 version dpc3939-P20-18-v303r20421746-170221a-CMCST
Description
The issue allows local users with command access to read arbitrary files via UPnP access to the
/var/IGD/ directory. This can be exploited by users who have gained command access as a result of previous exploitation.Recommendations
For Cisco DPC3939 version dpc3939-P20-18-v303r20421746-170221a-CMCST, consider restricting access to the
/var/IGD/ directory to minimize the risk of exploitation. As a temporary workaround, disabling UPnP access until a patch is available can help mitigate the issue.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾