{"id":"CVE-2012-3047","aliases":["EUVD-2012-3025","GHSA-fg3x-j3vq-xxhh"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta...","description":"Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-06","score":0.00942,"percentile":0.61169,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2013-12-10T19:00:00Z","modified":"2026-06-16T23:42:33Z","products":[{"vendor":"cisco","product":"scientific_atlanta_dpc2420"},{"vendor":"cisco","product":"scientific_atlanta_dpc3000\\/epc3000"},{"vendor":"cisco","product":"scientific_atlanta_dpc3008\\/epc3008"},{"vendor":"cisco","product":"scientific_atlanta_dpc3825"},{"vendor":"cisco","product":"scientific_atlanta_dpc3925"},{"vendor":"cisco","product":"scientific_atlanta_dpc\\/epc2100"},{"vendor":"cisco","product":"scientific_atlanta_dpc\\/epc2202"},{"vendor":"cisco","product":"scientific_atlanta_dpc\\/epc2203"},{"vendor":"cisco","product":"scientific_atlanta_dpc\\/epc2325"},{"vendor":"cisco","product":"scientific_atlanta_dpc\\/epc2425"},{"vendor":"cisco","product":"scientific_atlanta_dpc\\/epc2434"},{"vendor":"cisco","product":"scientific_atlanta_dpc\\/epc2505"},{"vendor":"cisco","product":"scientific_atlanta_dpc\\/epc3010"},{"vendor":"cisco","product":"scientific_atlanta_dpc\\/epc3212"},{"vendor":"cisco","product":"scientific_atlanta_dpc\\/epc_3208"},{"vendor":"cisco","product":"scientific_atlanta_dpq2202"},{"vendor":"cisco","product":"scientific_atlanta_dpq2425"},{"vendor":"cisco","product":"scientific_atlanta_dpq3212"},{"vendor":"cisco","product":"scientific_atlanta_dpq3925"},{"vendor":"cisco","product":"scientific_atlanta_dpq\\/epq2160"},{"vendor":"cisco","product":"scientific_atlanta_dpr362"},{"vendor":"cisco","product":"scientific_atlanta_dpw700"},{"vendor":"cisco","product":"scientific_atlanta_dpw730"},{"vendor":"cisco","product":"scientific_atlanta_dpw939"},{"vendor":"cisco","product":"scientific_atlanta_dpw941"},{"vendor":"cisco","product":"scientific_atlanta_dpx100\\/120"},{"vendor":"cisco","product":"scientific_atlanta_dpx110"},{"vendor":"cisco","product":"scientific_atlanta_dpx130"},{"vendor":"cisco","product":"scientific_atlanta_dpx213"},{"vendor":"cisco","product":"scientific_atlanta_dpx2213"},{"vendor":"cisco","product":"scientific_atlanta_dpx\\/epx2100"},{"vendor":"cisco","product":"scientific_atlanta_dpx\\/epx2203"},{"vendor":"cisco","product":"scientific_atlanta_dpx\\/epx2203c"},{"vendor":"cisco","product":"scientific_atlanta_epc2420"},{"vendor":"cisco","product":"scientific_atlanta_epc3825"},{"vendor":"cisco","product":"scientific_atlanta_epc3925"},{"vendor":"cisco","product":"scientific_atlanta_wag310g"}],"references":[{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=26036","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3047"},{"url":"https://github.com/advisories/GHSA-fg3x-j3vq-xxhh"}],"sources":{"cve":[{"id":"CVE-2012-3047","description":"Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","status":"published","published":"2013-12-10T19:00:00Z","modified":"2024-08-06T19:50:05.394Z","updated_at":"2026-11-02T14:34:50.615647Z"}],"euvd":[{"id":"EUVD-2012-3025","description":"Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","status":"published","published":"2013-12-10T19:00:00Z","modified":"2024-08-06T19:50:05Z","updated_at":"2026-11-03T01:56:12.278388Z"}],"ghsa":[{"id":"GHSA-fg3x-j3vq-xxhh","title":"Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta...","description":"Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","status":"published","published":"2022-05-17T04:56:42Z","modified":"2023-01-28T05:02:42Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:43:49.735086Z"}],"nvd":[{"id":"CVE-2012-3047","description":"Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","status":"published","published":"2013-12-10T19:55:03.967Z","modified":"2026-06-16T23:42:33.16Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:02:17.375282Z"}]}}