critical9.8Public exploit code
CVE-2017-11502
Technicolor DPC3928AD DOCSIS devices allow remote attackers to read arbitrary files via a request starting with "GET /../" on TCP port 4321.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cisco DPC3928 Router - Arbitrary File Disclosure2017-05-10 · webapps · hardware
Impact
Technicolor DPC3928AD DOCSIS devices allow remote attackers to read arbitrary files via a request starting with "GET /../" on TCP port 4321.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Dpc3928ad Docsis Wireless Router Firmware | All versions |