vulnwire
9.1crit

CVE-2017-5135in critical feed1 exploit

Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases.

Published 9 y ago · modified 4 mo ago · JSON

CVSS
9.1
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
17.9%
percentile 97%
Public exploits
1
Exploit-DB

Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases. The Technicolor (formerly Cisco) DPC3928SL with firmware D3928SL-P15-13-A386-c3420r55105-160127a could be reached by any SNMP community string from the Internet; also, you can write in the MIB because it provides write properties, aka Stringbleed. NOTE: the string-bleed/StringBleed-CVE-2017-5135 GitHub repository is not a valid reference as of 2017-04-27; it contains Trojan horse code purported to exploit this vulnerability.

Exploit prediction (EPSS)

17.85% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

Exploits and detections

  • EDB-43384 Technicolor DPC3928SL - SNMP Authentication Bypass · remote · 2017-05-05

CVSS scores

Assigned byVersionScoreVector
NVD3.09.1CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
NVD2.06.4AV:N/AC:L/Au:N/C:P/I:P/A:N

References

  • stringbleed.github.io / · x_refsource_MISC, x_transferred
  • securityfocus.com /bid/98092 · vdb-entry, x_refsource_BID, x_transferred
  • reddit.com /r/netsec/comments/67qt6u/cve_20175135_snmp_authentication_bypass/ · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.