CVE-2016-7454

Name: CVE-2016-7454
Creator: NVD / NIST
Published: 2016-12-17T03:59:00.14+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 3.33%

Last modified Jun 17, 2026

CVE-2016-7454 is a vulnerability of currently unknown severity. CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware dpc3941-P20-18-v303r20421733-160413a-CMCST allows an attacker to change the Wi-Fi password, open the remote management interface, or reset the router.. EPSS estimates a 3.33% chance of exploitation in the next 30 days.

Description

CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware dpc3941-P20-18-v303r20421733-160413a-CMCST allows an attacker to change the Wi-Fi password, open the remote management interface, or reset the router.

Metrics

EPSS Probability

3.33%

87.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-352

Affected Software

Vendor	Product	Versions
Technicolor	Xfinity Gateway Router Dpc3941t Firmware	dpc3941-p20-18-v303r20421733-160413a-cmcst

References

http://www.securityfocus.com/bid/94881Third Party Advisory, VDB Entry
https://packetstormsecurity.com/files/140121/XFINITY-Gateway-Technicolor-DPC3941T-Cross-Site-Request-Forgery.htmlExploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/94881Third Party Advisory, VDB Entry
https://packetstormsecurity.com/files/140121/XFINITY-Gateway-Technicolor-DPC3941T-Cross-Site-Request-Forgery.htmlExploit, Third Party Advisory, VDB Entry

Timeline

Published: Dec 17, 2016
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2016-7454?

How severe is CVE-2016-7454?

Severity scoring for CVE-2016-7454 is pending analysis. The EPSS model estimates a 3.33% probability of exploitation in the next 30 days.

How do I fix CVE-2016-7454?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2016-7454?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST