Description
Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://tools.cisco.com/security/center/viewAlert.x?alertId=26036
Scores
EPSS
0.0094
EPSS Percentile
57.3%
Details
CWE
CWE-79
Status
published
Products (37)
cisco/scientific_atlanta_dpc2420
cisco/scientific_atlanta_dpc3000\/epc3000
cisco/scientific_atlanta_dpc3008\/epc3008
cisco/scientific_atlanta_dpc3825
cisco/scientific_atlanta_dpc3925
cisco/scientific_atlanta_dpc\/epc2100
cisco/scientific_atlanta_dpc\/epc2202
cisco/scientific_atlanta_dpc\/epc2203
cisco/scientific_atlanta_dpc\/epc2325
cisco/scientific_atlanta_dpc\/epc2425
... and 27 more
Published
Dec 10, 2013
Tracked Since
Feb 18, 2026