medium4.3
CVE-2012-3047
Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject ar…
Impact
Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Scientific Atlanta Dpc\/Epc 3208 | All versions |
| Cisco | Scientific Atlanta Dpc\/Epc2100 | All versions |
| Cisco | Scientific Atlanta Dpc\/Epc2202 | All versions |
| Cisco | Scientific Atlanta Dpc\/Epc2203 | All versions |
| Cisco | Scientific Atlanta Dpc\/Epc2325 | All versions |
| Cisco | Scientific Atlanta Dpc\/Epc2425 | All versions |
| Cisco | Scientific Atlanta Dpc\/Epc2434 | All versions |
| Cisco | Scientific Atlanta Dpc\/Epc2505 | All versions |
| Cisco | Scientific Atlanta Dpc\/Epc3010 | All versions |
| Cisco | Scientific Atlanta Dpc\/Epc3212 | All versions |
| Cisco | Scientific Atlanta Dpc2420 | All versions |
| Cisco | Scientific Atlanta Dpc3000\/Epc3000 | All versions |