What’s Vulnerable › Vulnerabilities

CVE-2017-9475

• Severity: medium (CVSS 5.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-07-31 · updated 2026-06-17
• Weakness: CWE-287

Description

Comcast XFINITY WiFi Home Hotspot devices allow remote attackers to spoof the identities of Comcast customers via a forged MAC address.

Affected products

• Comcast Xfinity Wifi Hotspot: all versions

References

• https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-17.public-wifi-theft-impersonation.txt
• https://github.com/BastilleResearch/CableTap/blob/master/doc/advisories/bastille-17.public-wifi-theft-impersonation.txt

Get alerted when CVE-2017-9475 or the next vulnerability affects your stack