[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-zs69mAS7vf2xFqeFufYdmPvPw9nAY5cS4gmcj1b-jU":3,"g5a-risk:CVE-2017-9488":134},{"success":4,"data":5,"meta":132},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":59,"references":60,"referencesCount":69,"weaknesses":70,"weaknessesCount":79,"isActivelyExploited":80,"cisaInfo":15,"otxData":15,"relatedBlogPosts":81,"seoMetadata":82,"configurations":107,"relatedVendorCves":130,"notableEvents":131},"CVE-2017-9488","What is CVE-2017-9488?","The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devices allows remote attackers to access the web UI by establishing a session to the wan0 WAN IPv6 address and then entering unspecified hardcoded credentials. This wan0 interface cannot be accessed from the public Internet.","The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) de...","2017-07-31T03:29:00.613","2025-04-20T01:37:25.86",8.8,"CVSS:3.0\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","ADJACENT_NETWORK","LOW","NONE","UNCHANGED","HIGH",2.8,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:A\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",5.8,"MEDIUM",6.5,6.4,0.01273,[39,39,39,39,39,39,39],"High",[43,48,52,56],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"cisco","dpc3939_firmware","dpc3939-p20-18-v303r20421746-170221a-cmcst","cpe:2.3:o:cisco:dpc3939_firmware:dpc3939-p20-18-v303r20421746-170221a-cmcst:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"dpc3939","-","cpe:2.3:h:cisco:dpc3939:-:*:*:*:*:*:*:*",{"vendor":44,"product":53,"version":54,"criteria":55,"vulnerable":4},"dpc3941t_firmware","dpc3941_2.5s3_prod_sey","cpe:2.3:o:cisco:dpc3941t_firmware:dpc3941_2.5s3_prod_sey:*:*:*:*:*:*:*",{"vendor":44,"product":57,"version":50,"criteria":58,"vulnerable":4},"dpc3941t","cpe:2.3:h:cisco:dpc3941t:-:*:*:*:*:*:*:*",4,[61,67],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fgithub.com\u002FBastilleResearch\u002FCableTap\u002Fblob\u002Fmaster\u002Fdoc\u002Fadvisories\u002Fbastille-31.stb-remote-webui.txt","GitHub",[65,66],"Exploit","Third Party Advisory",{"url":62,"source":63,"tags":68},[65,66],2,[71],{"id":72,"name":73,"description":74,"extendedDescription":75,"status":76,"abstraction":77,"structure":78},"CWE-798","Use of Hard-coded Credentials","The product contains hard-coded credentials, such as a password or cryptographic key.","There are two main variations:","Draft","Base","Simple",1,false,[],{"title":83,"metaDescription":84,"keywords":85,"canonicalUrl":86,"structuredData":87},"What is CVE-2017-9488? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-9488, a high severity cyber security vulnerability from 2017. The Comcast firmware on Cisco DPC3939 (firmware version dpc3...","CVE-2017-9488, CVE-2017-9488 vulnerability, CVE-2017-9488 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, cisco security, dpc3939_firmware vulnerability, dpc3939 vulnerability, dpc3941t_firmware vulnerability, dpc3941t vulnerability","\u002Fwhat-is\u002Fcve-2017-9488",{"@context":88,"@type":89,"headline":83,"description":84,"datePublished":10,"dateModified":11,"author":90,"publisher":94,"about":98,"mainEntityOfPage":102,"articleSection":105,"keywords":106},"https:\u002F\u002Fschema.org","TechArticle",{"@type":91,"name":92,"url":93},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":91,"name":92,"url":93,"logo":95},{"@type":96,"url":97},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":99,"name":6,"description":100,"additionalType":101},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":103,"@id":104},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-9488","Cybersecurity","CVE-2017-9488, CVE-2017-9488 vulnerability, CVE-2017-9488 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[108,120],{"Operator":109,"Negate":15,"Nodes":110},"AND",[111,116],{"Operator":112,"Negate":15,"CPEMatch":113},"OR",[114],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":115,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C881B07A-9652-465E-A804-1B5ED959E1C4",{"Operator":112,"Negate":15,"CPEMatch":117},[118],{"Vulnerable":15,"Criteria":51,"MatchCriteriaID":119,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F4E96E97-FA9D-446C-A5D7-1B4C2DD939D4",{"Operator":109,"Negate":15,"Nodes":121},[122,126],{"Operator":112,"Negate":15,"CPEMatch":123},[124],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":125,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"42C5B524-7AF3-4171-8D5F-8AE80C7EA925",{"Operator":112,"Negate":15,"CPEMatch":127},[128],{"Vulnerable":15,"Criteria":58,"MatchCriteriaID":129,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"053BE8F7-5FFA-4021-B18C-651F0546A04B",[],[],{"lastModified":11,"cacheTime":133,"version":32},1792391022466,{"score":135,"band":136,"action":137,"scoredAt":138},50,"Medium","Plan remediation","2026-10-17T09:06:34.14462+00:00"]