Tracker / CVE-2012-3047
CVE-2012-3047
Medium 4.3
Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products and versions
| cisco | scientific_atlanta_dpc2420 |
|---|---|
| cisco | scientific_atlanta_dpc3000\/epc3000 |
| cisco | scientific_atlanta_dpc3008\/epc3008 |
| cisco | scientific_atlanta_dpc3825 |
| cisco | scientific_atlanta_dpc3925 |
| cisco | scientific_atlanta_dpc\/epc2100 |
| cisco | scientific_atlanta_dpc\/epc2202 |
| cisco | scientific_atlanta_dpc\/epc2203 |
| cisco | scientific_atlanta_dpc\/epc2325 |
| cisco | scientific_atlanta_dpc\/epc2425 |
| cisco | scientific_atlanta_dpc\/epc2434 |
| cisco | scientific_atlanta_dpc\/epc2505 |
| cisco | scientific_atlanta_dpc\/epc3010 |
| cisco | scientific_atlanta_dpc\/epc3212 |
| cisco | scientific_atlanta_dpc\/epc_3208 |
| cisco | scientific_atlanta_dpq2202 |
| cisco | scientific_atlanta_dpq2425 |
| cisco | scientific_atlanta_dpq3212 |
| cisco | scientific_atlanta_dpq3925 |
| cisco | scientific_atlanta_dpq\/epq2160 |
| cisco | scientific_atlanta_dpr362 |
| cisco | scientific_atlanta_dpw700 |
| cisco | scientific_atlanta_dpw730 |
| cisco | scientific_atlanta_dpw939 |
| cisco | scientific_atlanta_dpw941 |
| cisco | scientific_atlanta_dpx100\/120 |
| cisco | scientific_atlanta_dpx110 |
| cisco | scientific_atlanta_dpx130 |
| cisco | scientific_atlanta_dpx213 |
| cisco | scientific_atlanta_dpx2213 |
| cisco | scientific_atlanta_dpx\/epx2100 |
| cisco | scientific_atlanta_dpx\/epx2203 |
| cisco | scientific_atlanta_dpx\/epx2203c |
| cisco | scientific_atlanta_epc2420 |
| cisco | scientific_atlanta_epc3825 |
| cisco | scientific_atlanta_epc3925 |
| cisco | scientific_atlanta_wag310g |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.