CVE-2012-3047
Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta...
CVE-2012-3047 is a medium vulnerability (CVSS 4.3) in Cisco Scientific Atlanta Dpc2420, published December 10, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.94%, the 61st percentile. No source names a fixed version.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 0.94%EPSS, 61st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploit likelihood
Affected products
- cisco scientific atlanta dpc2420
- cisco scientific atlanta dpc3000\/epc3000
- cisco scientific atlanta dpc3008\/epc3008
- cisco scientific atlanta dpc3825
- cisco scientific atlanta dpc3925
- cisco scientific atlanta dpc\/epc2100
- cisco scientific atlanta dpc\/epc2202
- cisco scientific atlanta dpc\/epc2203
- cisco scientific atlanta dpc\/epc2325
- cisco scientific atlanta dpc\/epc2425
- cisco scientific atlanta dpc\/epc2434
- cisco scientific atlanta dpc\/epc2505
Show 25 moreShow less
- cisco scientific atlanta dpc\/epc3010
- cisco scientific atlanta dpc\/epc3212
- cisco scientific atlanta dpc\/epc 3208
- cisco scientific atlanta dpq2202
- cisco scientific atlanta dpq2425
- cisco scientific atlanta dpq3212
- cisco scientific atlanta dpq3925
- cisco scientific atlanta dpq\/epq2160
- cisco scientific atlanta dpr362
- cisco scientific atlanta dpw700
- cisco scientific atlanta dpw730
- cisco scientific atlanta dpw939
- cisco scientific atlanta dpw941
- cisco scientific atlanta dpx100\/120
- cisco scientific atlanta dpx110
- cisco scientific atlanta dpx130
- cisco scientific atlanta dpx213
- cisco scientific atlanta dpx2213
- cisco scientific atlanta dpx\/epx2100
- cisco scientific atlanta dpx\/epx2203
- cisco scientific atlanta dpx\/epx2203c
- cisco scientific atlanta epc2420
- cisco scientific atlanta epc3825
- cisco scientific atlanta epc3925
- cisco scientific atlanta wag310g
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Record
CVE-2012-3047- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE ListNo score
Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Record
CVE-2012-3047- Updated
- 2026-11-02
EUVDEUVD-2012-3025No score
Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Record
EUVD-2012-3025- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fg3x-j3vq-xxhhNo score
Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta...
Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Record
GHSA-fg3x-j3vq-xxhh- Weakness
- CWE-79
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.