What is the CVSS score of CVE-2014-3306?

CVE-2014-3306 has a CVSS 2.0 base score of 10.0 (Critical). CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 5.1%.

Dpc3010 CVE-2014-3306

CRITICAL

Improper Input Validation (CWE-20)

2014-07-18 psirt@cisco.com

Cisco RCE Dpc3010 Dpc3212 Dpc3825 Dpc3925 Dpq3925 Epc3010 Epc3212 Epc3825 Epc3925

10.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

10.0 CRITICAL

AV:N/AC:L/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Jul 18, 2014 - 00:55 cve.org

CRITICAL 10.0

DescriptionCVE.org

The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway products allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCup40808.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-20. The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway products allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCup40808. Affected products include: Cisco Dpc3010, Cisco Dpc3212, Cisco Dpc3825, Cisco Dpc3925, Cisco Dpq3925.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.