What’s Vulnerable › Vulnerabilities

CVE-2014-3306

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-07-18 · updated 2026-06-17
• Weakness: CWE-20

Description

The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway products allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCup40808.

Affected products

• Cisco Dpc3010: all versions
• Cisco Dpc3212: all versions
• Cisco Dpc3825: all versions
• Cisco Dpc3925: all versions
• Cisco Dpq3925: all versions
• Cisco Epc3010: all versions
• Cisco Epc3212: all versions
• Cisco Epc3825: all versions
• Cisco Epc3925: all versions

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ciscosa-20140716-cm
• http://www.securitytracker.com/id/1030598
• http://www.securitytracker.com/id/1030599
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ciscosa-20140716-cm
• http://www.securitytracker.com/id/1030598
• http://www.securitytracker.com/id/1030599

Get alerted when CVE-2014-3306 or the next vulnerability affects your stack