CVE-2012-3047
Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Score
- CVSS 2.0 4.3 Medium
- Status
- Modified - psirt@cisco.com
- Published
- 2013-12-10
- Last modified
- 2024-08-06
- Weaknesses
- CWE-79
Affected products
- Scientific Atlanta Dpc2420 (Cisco)
- Scientific Atlanta Dpc3000/epc3000 (Cisco)
- Scientific Atlanta Dpc3008/epc3008 (Cisco)
- Scientific Atlanta Dpc3825 (Cisco)
- Scientific Atlanta Dpc3925 (Cisco)
- Scientific Atlanta Dpc/epc2100 (Cisco)
- Scientific Atlanta Dpc/epc2202 (Cisco)
- Scientific Atlanta Dpc/epc2203 (Cisco)
- Scientific Atlanta Dpc/epc2325 (Cisco)
- Scientific Atlanta Dpc/epc2425 (Cisco)
- Scientific Atlanta Dpc/epc2434 (Cisco)
- Scientific Atlanta Dpc/epc2505 (Cisco)
- Scientific Atlanta Dpc/epc3010 (Cisco)
- Scientific Atlanta Dpc/epc3212 (Cisco)
- Scientific Atlanta Dpc/epc 3208 (Cisco)
- Scientific Atlanta Dpq2202 (Cisco)
- Scientific Atlanta Dpq2425 (Cisco)
- Scientific Atlanta Dpq3212 (Cisco)
- Scientific Atlanta Dpq3925 (Cisco)
- Scientific Atlanta Dpq/epq2160 (Cisco)
- Scientific Atlanta Dpr362 (Cisco)
- Scientific Atlanta Dpw700 (Cisco)
- Scientific Atlanta Dpw730 (Cisco)
- Scientific Atlanta Dpw939 (Cisco)
- Scientific Atlanta Dpw941 (Cisco)
- Scientific Atlanta Dpx100/120 (Cisco)
- Scientific Atlanta Dpx110 (Cisco)
- Scientific Atlanta Dpx130 (Cisco)
- Scientific Atlanta Dpx213 (Cisco)
- Scientific Atlanta Dpx2213 (Cisco)
- Scientific Atlanta Dpx/epx2100 (Cisco)
- Scientific Atlanta Dpx/epx2203 (Cisco)
- Scientific Atlanta Dpx/epx2203c (Cisco)
- Scientific Atlanta Epc2420 (Cisco)
- Scientific Atlanta Epc3825 (Cisco)
- Scientific Atlanta Epc3925 (Cisco)
- Scientific Atlanta Wag310g (Cisco)
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=26036
