Auth bypass in Cisco Scientific Atlanta Webstar Dpc2100r2

CVE-2010-2026

The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 allows remote attackers to bypass authentication, and reset the modem or replace the firmware, via a direct request to an unspecified page.

Vulnerability class: Broken Authentication

EPSS: 0.024 (82.0th percentile) — read the EPSS interpretation.

Affected products

Cisco Scientific_atlanta_webstar_dpc2100r2 — versions 2.0.2r1256-060303
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)