XSS in Cisco Scientific Atlanta Dpc2420
CVE-2012-3047
Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.009 (57.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Scientific_atlanta_dpc2420
- Cisco Scientific_atlanta_dpc3000\/epc3000
- Cisco Scientific_atlanta_dpc3008\/epc3008
- Cisco Scientific_atlanta_dpc3825
- Cisco Scientific_atlanta_dpc3925
- Cisco Scientific_atlanta_dpc\/epc2100
- Cisco Scientific_atlanta_dpc\/epc2202
- Cisco Scientific_atlanta_dpc\/epc2203
- Cisco Scientific_atlanta_dpc\/epc2325
- Cisco Scientific_atlanta_dpc\/epc2425
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)