Vulnerability Details CVE-2016-7454
CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware dpc3941-P20-18-v303r20421733-160413a-CMCST allows an attacker to change the Wi-Fi password, open the remote management interface, or reset the router.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 76.5%
CVSS Severity
CVSS v3 Score 8.0
CVSS v2 Score 7.9
References
- http://www.securityfocus.com/bid/94881
- https://packetstormsecurity.com/files/140121/XFINITY-Gateway-Technicolor-DPC3941T-Cross-Site-Request-Forgery.html
- http://www.securityfocus.com/bid/94881
- https://packetstormsecurity.com/files/140121/XFINITY-Gateway-Technicolor-DPC3941T-Cross-Site-Request-Forgery.html
Products affected by CVE-2016-7454
-
cpe:2.3:h:technicolor:xfinity_gateway_router_dpc3941t:-
-
Technicolor » Xfinity Gateway Router Dpc3941t Firmware » Version: dpc3941-p20-18-v303r20421733-160413a-cmcstcpe:2.3:o:technicolor:xfinity_gateway_router_dpc3941t_firmware:dpc3941-p20-18-v303r20421733-160413a-cmcst