CVE-2014-3306

EPSS 10.47%
Veröffentlicht 18.07.2014 00:55:04
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle psirt@cisco.com
CVE-Watchlists
Login
Unerledigt
Login

The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway products allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCup40808.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Dpc3010 Version-

Cisco ≫ Dpc3212 Version-

Cisco ≫ Dpc3825 Version-

Cisco ≫ Dpc3925 Version-

Cisco ≫ Dpq3925 Version-

Cisco ≫ Epc3010 Version-

Cisco ≫ Epc3212 Version-

Cisco ≫ Epc3825 Version-

Cisco ≫ Epc3925 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	10.47%	0.925

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ciscosa-20140716-cm

Vendor Advisory

http://www.securitytracker.com/id/1030598

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1030599

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2014-3306

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-3306

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-3306

EUVD