CVE-2016-7454

Severity: high (CVSS 8.0 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2016-12-17 · updated 2026-06-17
Weakness: CWE-352

Description

CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware dpc3941-P20-18-v303r20421733-160413a-CMCST allows an attacker to change the Wi-Fi password, open the remote management interface, or reset the router.

Affected products

Technicolor Xfinity Gateway Router Dpc3941T Firmware: dpc3941-p20-18-v303r20421733-160413a-cmcst

References

http://www.securityfocus.com/bid/94881
https://packetstormsecurity.com/files/140121/XFINITY-Gateway-Technicolor-DPC3941T-Cross-Site-Request-Forgery.html
http://www.securityfocus.com/bid/94881
https://packetstormsecurity.com/files/140121/XFINITY-Gateway-Technicolor-DPC3941T-Cross-Site-Request-Forgery.html

Get alerted when CVE-2016-7454 or the next vulnerability affects your stack