PT-2017-18959
CVE-2017-9489
·
Publicado
2017-07-31
·
Atualizado
2021-09-13
Descrição por
CVSS 3.1
8.8
AltaMétricasAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Cisco DPC3939B version dpc3939b-v303r204217-150321a-CMCST
Description
The issue allows configuration changes via CSRF, which can be exploited to make unauthorized changes to the device settings.
Recommendations
For Cisco DPC3939B version dpc3939b-v303r204217-150321a-CMCST, as a temporary workaround, consider implementing CSRF protection measures, such as validating request tokens, to prevent unauthorized configuration changes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾