Critical severity9.1NVD Advisory· Published Apr 27, 2017· Updated Jun 17, 2026
CVE-2017-5135
CVE-2017-5135
Description
Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases. The Technicolor (formerly Cisco) DPC3928SL with firmware D3928SL-P15-13-A386-c3420r55105-160127a could be reached by any SNMP community string from the Internet; also, you can write in the MIB because it provides write properties, aka Stringbleed. NOTE: the string-bleed/StringBleed-CVE-2017-5135 GitHub repository is not a valid reference as of 2017-04-27; it contains Trojan horse code purported to exploit this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:o:technicolor:dpc3928sl_firmware:d3928sl-p15-13-a386-c3420r55105-160127a:*:*:*:*:*:*:*
- Range: D3928SL-P15-13-A386-c3420r55105-160127a
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/98092nvdThird Party AdvisoryVDB Entry
- stringbleed.github.ionvdTechnical DescriptionThird Party Advisory
- www.reddit.com/r/netsec/comments/67qt6u/cve_20175135_snmp_authentication_bypass/nvdPress/Media CoverageThird Party Advisory
News mentions
0No linked articles in our index yet.