CVE-2017-9482

Name of the Vulnerable Software and Affected Versions Comcast firmware on Cisco DPC3939 version dpc3939-P20-18-v303r20421746-170221a-CMCST

Description The issue is related to insufficient access control in the TELNET session of the Comcast firmware on Cisco DPC3939 devices. This allows a remote attacker to gain root access to the Network Processor Linux system by exploiting the vulnerability and establishing a TELNET session.

Recommendations For Comcast firmware on Cisco DPC3939 version dpc3939-P20-18-v303r20421746-170221a-CMCST, consider disabling the TELNET daemon as a temporary workaround until a patch is available. Restrict access to the TELNET session to minimize the risk of exploitation.