High severity8.8NVD Advisory· Published Jul 31, 2017· Updated May 13, 2026
CVE-2017-9490
CVE-2017-9490
Description
The Comcast firmware on Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows configuration changes via CSRF.
Affected products
3cpe:2.3:o:arris:tg1682g_firmware:10.0.132.sip.pc20.ct:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:arris:tg1682g_firmware:10.0.132.sip.pc20.ct:*:*:*:*:*:*:*
- cpe:2.3:o:arris:tg1682g_firmware:tg1682_2.2p7s2_prod_sey:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:dpc3939b_firmware:dpc3939b-v303r204217-150321a-cmcst:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-33.cross-site-request-forgery.txtnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.