CVE-2014-3306

2014-07-1801:00:00

CWE-20

[email protected]

web.nvd.nist.gov

cisco

web server

residential gateway

remote code execution

http request

vulnerability

cve-2014-3306

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.6%

JSON

The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway products allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCup40808.

Affected configurations

NVD

Node

ciscodpc3010Match-

ciscodpc3212Match-

ciscodpc3825Match-

ciscodpc3925Match-

ciscodpq3925Match-

ciscoepc3010Match-

ciscoepc3212Match-

ciscoepc3825Match-

ciscoepc3925Match-

CPENameOperatorVersion
cisco:dpc3010cisco dpc3010eq-
cisco:dpc3212cisco dpc3212eq-
cisco:dpc3825cisco dpc3825eq-
cisco:dpc3925cisco dpc3925eq-
cisco:dpq3925cisco dpq3925eq-
cisco:epc3010cisco epc3010eq-
cisco:epc3212cisco epc3212eq-
cisco:epc3825cisco epc3825eq-
cisco:epc3925cisco epc3925eq-

CPE	Name	Operator	Version
cisco:dpc3010	cisco dpc3010	eq	-
cisco:dpc3212	cisco dpc3212	eq	-
cisco:dpc3825	cisco dpc3825	eq	-
cisco:dpc3925	cisco dpc3925	eq	-
cisco:dpq3925	cisco dpq3925	eq	-
cisco:epc3010	cisco epc3010	eq	-
cisco:epc3212	cisco epc3212	eq	-
cisco:epc3825	cisco epc3825	eq	-
cisco:epc3925	cisco epc3925	eq	-