CVE-2014-3306

The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway products allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCup40808.

Score

CVSS 2.0 10.0 Critical

Status

Modified - psirt@cisco.com

Published

2014-07-18

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Dpc3010 (Cisco)
• Dpc3212 (Cisco)
• Dpc3825 (Cisco)
• Dpc3925 (Cisco)
• Dpq3925 (Cisco)
• Epc3010 (Cisco)
• Epc3212 (Cisco)
• Epc3825 (Cisco)
• Epc3925 (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ciscosa-20140716-cm
• http://www.securitytracker.com/id/1030598
• http://www.securitytracker.com/id/1030599