CVE-2017-5135 - CVE House

Back to Database

Status published Critical CVE-2017-5135

Certain Technicolor devices have an SNMP access-control bypass, possibly involving...

9.1 CVSS

Vulnerability Description

Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases. The Technicolor (formerly Cisco) DPC3928SL with firmware D3928SL-P15-13-A386-c3420r55105-160127a could be reached by any SNMP community string from the Internet; also, you can write in the MIB because it provides write properties, aka Stringbleed. NOTE: the string-bleed/StringBleed-CVE-2017-5135 GitHub repository is not a valid reference as of 2017-04-27; it contains Trojan horse code purported to exploit this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-5135

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from technicolor

View All →

An issue was discovered on Technicolor TC7337 8.89.17 devices. An...

Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords...

The web interface on the Technicolor TC7230 STEB 01.25 is...

An issue was discovered in certain Oi third-party firmware that...

An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote...

Affected Vendor

technicolor

View all reports →

Affected Software

dpc3928sl firmware

Vulnerable Versions:

d3928sl-p15-13-a386-c3420r55105-160127a

Timeline

Official Publish: April 27th, 2017

Last Modified: August 5th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.