CVE-2010-2026

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-05-26 · updated 2026-06-16
Weakness: CWE-287

Description

The web interface on the Cisco Scientific Atlanta WebSTAR DPC2100R2 cable modem with firmware 2.0.2r1256-060303 allows remote attackers to bypass authentication, and reset the modem or replace the firmware, via a direct request to an unspecified page.

Affected products

Cisco Scientific Atlanta Webstar Dpc2100R2: 2.0.2r1256-060303

References

http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0322.html
http://www.securityfocus.com/bid/40346
http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0322.html
http://www.securityfocus.com/bid/40346

Get alerted when CVE-2010-2026 or the next vulnerability affects your stack