high8.0Public exploit code
CVE-2016-7454
CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware dpc3941-P20-18-v303r20421733-160413a-CMCST allows an attacker to …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Xfinity Gateway (Technicolor DPC3941T) - Cross-Site Request Forgery2016-08-09 · webapps · hardware
Impact
CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware dpc3941-P20-18-v303r20421733-160413a-CMCST allows an attacker to change the Wi-Fi password, open the remote management interface, or reset the router.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Technicolor | Xfinity Gateway Router Dpc3941t Firmware | Version dpc3941-p20-18-v303r20421733-160413a-cmcst |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/94881
- https://packetstormsecurity.com/files/140121/XFINITY-Gateway-Technicolor-DPC3941T-Cross-Site-Request-Forgery.html
- http://www.securityfocus.com/bid/94881
- https://packetstormsecurity.com/files/140121/XFINITY-Gateway-Technicolor-DPC3941T-Cross-Site-Request-Forgery.html