PT-2017-16332 · Technicolor · Technicolor Dpc3928Sl

Published 2017-04-27 · Updated 2025-11-28 · CVE-2017-5135

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Technicolor DPC3928SL version D3928SL-P15-13-A386-c3420r55105-160127a

Description The issue involves an SNMP access-control bypass, which may be related to an ISP customization in some cases. This allows any SNMP community string to access the device from the Internet. Additionally, it is possible to write to the MIB due to provided write properties.

Recommendations For Technicolor DPC3928SL version D3928SL-P15-13-A386-c3420r55105-160127a, consider restricting access to the SNMP service to minimize the risk of exploitation. As a temporary workaround, limit the use of the write properties in the MIB to prevent unauthorized modifications. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2017-5135

Affected Products

Technicolor Dpc3928Sl

References · 6

• 🔥 https://stringbleed.github.io · Exploit
• 🔥 https://exploit-db.com/exploits/43384 · Exploit
• https://osv.dev/vulnerability/CVE-2017-5135 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-5135 · Security Note
• http://securityfocus.com/bid/98092 · Note
• https://reddit.com/r/netsec/comments/67qt6u/cve_20175135_snmp_authentication_bypass · Note