9.8
CVSSv3

CVE-2016-1327

Published: 09/03/2016 Updated: 03/12/2016
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in the web server on Cisco DPC2203 and EPC2203 devices with firmware r1_customer_image allows remote malicious users to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCuv05935.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco dpc2203_cable_modem_firmware r1_customer_image_base

cisco epc2203_cable_modem_firmware r1_customer_image_base

Vendor Advisories

A vulnerability in the web server used in the Cisco Cable Modem with Digital Voice Model DPC2203 could allow an unauthenticated, remote attacker to exploit a buffer overflow and cause arbitrary code execution The vulnerability is due to improper input validation for HTTP requests An attacker could exploit this vulnerability by sending a crafted ...