CVE-2014-3306

Опубликовано: 18 июл. 2014

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway products allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCup40808.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ciscosa-20140716-cm
Vendor Advisory
http://www.securitytracker.com/id/1030598
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030599
Third Party Advisory
VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ciscosa-20140716-cm
Vendor Advisory
http://www.securitytracker.com/id/1030598
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030599
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:h:cisco:dpc3010:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:dpc3212:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:dpc3825:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:dpc3925:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:dpq3925:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:epc3010:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:epc3212:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:epc3825:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:epc3925:-:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05084

Низкий

10 Critical

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-rg5w-9gf2-h2wm

github

больше 3 лет назад