Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2002-1968: Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108

14
Routine
LOW 2.1MITIGATE

CVE-2002-1968 is a low-severity flaw (CVSS 2.1) affecting doxport 1100. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, downloads a DOCSIS configuration file from a TFTP server running on the internal network, which allows local users to modify configuration of the modem via a malicious TFTP server.

Why this priority

  • No elevated risk signals yet

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score2.1 (Low)
EPSS exploit chance0.3% (top 74%)
CISA exploited listNo
Published2002-12-31
Last modified2026-06-16
Publisher (CNA): MITRE · Vendor: com21

Share: LinkedIn · X · Reddit

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

com21 doxport 1100 MITIGATE
Affected: 2.1.1.106
Fixed in: no fixed release known
Safe to downgrade to: a release before 2.1.1.106
Firmware
Install the latest firmware from the vendor advisory; if none, apply the vendor workaround.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2002-1968?

doxport 1100: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2002-1968 being exploited?

CVE-2002-1968 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2002-1968 affect?

CVE-2002-1968 affects doxport 1100. Severity is low (CVSS 2.1). Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, downloads a DOCSIS configuration file from a TFTP server running on the internal network, which allows local users to modify

How urgent is CVE-2002-1968?

Priority 14/100. No elevated risk signals yet.

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.