CVE-2014-3306 The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway products allows remote attackers to execute arbitrary code via....
HighCVSS 10.0
EPSS 7.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway products allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCup40808.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco dpc3010 | All versions | No fix listed |
| cisco dpc3212 | All versions | No fix listed |
| cisco dpc3825 | All versions | No fix listed |
| cisco dpc3925 | All versions | No fix listed |
| cisco dpq3925 | All versions | No fix listed |
| cisco epc3010 | All versions | No fix listed |
| cisco epc3212 | All versions | No fix listed |
| cisco epc3825 | All versions | No fix listed |
| cisco epc3925 | All versions | No fix listed |
References
- 20140716 Cisco Wireless Residential Gateway Remote Code Execution Vulnerability vendor-advisory
- 1030598 third-party-advisory vdb-entry
- 1030599 third-party-advisory vdb-entry