PT-2017-18948 · Comcast · Xfinity Wifi Home Hotspot

Chris Grayson + 2 · Published 2017-07-31 · Updated 2017-08-08 · CVE-2017-9475

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Comcast XFINITY WiFi Home Hotspot devices (affected versions not specified)

Description The issue allows remote attackers to spoof the identities of Comcast customers by using a forged MAC address.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2017-9475

Affected Products

Xfinity Wifi Home Hotspot

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2017-9475 · Security Note
• https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-17.public-wifi-theft-impersonation.txt · Note