« Volver al listado

CVE-2014-3306

Estado: ModificadaAlta (10)—

The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway products allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCup40808.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (9)

Cisco — Dpc3010Cisco — Dpc3212Cisco — Dpc3825Cisco — Dpc3925Cisco — Dpq3925Cisco — Epc3010Cisco — Epc3212Cisco — Epc3825Cisco — Epc3925

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-3306",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-07-18T00:55:04.830",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ciscosa-20140716-cm",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1030598",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1030599",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ciscosa-20140716-cm",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1030598",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1030599",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway products allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCup40808."
    },
    {
      "lang": "es",
      "value": "El servidor web en productos Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, y EPC3925 Wireless Residential Gateway permite a atacantes remotos ejecutar código arbitrario a través de una solicitud HTTP manipulada, también conocido como Bug ID CSCup40808."
    }
  ],
  "lastModified": "2026-06-17T00:07:57.550",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:dpc3010:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E45A410D-E925-4660-BF51-62A16E799B62"
            },
            {
              "criteria": "cpe:2.3:h:cisco:dpc3212:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27F50A41-EA8A-46D8-BDD9-6ED89EF5184B"
            },
            {
              "criteria": "cpe:2.3:h:cisco:dpc3825:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "97029F20-9265-46A4-BFAE-E2E03B2B0A8B"
            },
            {
              "criteria": "cpe:2.3:h:cisco:dpc3925:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C38E93F5-1CF8-4269-99A8-50D2E4D80690"
            },
            {
              "criteria": "cpe:2.3:h:cisco:dpq3925:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A399ADC1-8E85-4596-A675-7A8C25F1888F"
            },
            {
              "criteria": "cpe:2.3:h:cisco:epc3010:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CA0A17D8-1193-42D3-A00F-8B762B171C48"
            },
            {
              "criteria": "cpe:2.3:h:cisco:epc3212:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DCED8A34-F6A1-4786-A5BF-662F8842FB11"
            },
            {
              "criteria": "cpe:2.3:h:cisco:epc3825:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26E7AC16-EE5D-4D4D-84C6-0E00959FF4FF"
            },
            {
              "criteria": "cpe:2.3:h:cisco:epc3925:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9AF384F3-5435-4094-8BAD-2E5D1918F4BA"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}