PT-2017-18959
CVE-2017-9489
·
تاريخ النشر
2017-07-31
·
تاريخ التحديث
2021-09-13
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Cisco DPC3939B version dpc3939b-v303r204217-150321a-CMCST
Description
The issue allows configuration changes via CSRF, which can be exploited to make unauthorized changes to the device settings.
Recommendations
For Cisco DPC3939B version dpc3939b-v303r204217-150321a-CMCST, as a temporary workaround, consider implementing CSRF protection measures, such as validating request tokens, to prevent unauthorized configuration changes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾