CVE-2012-3047: Cisco Scientific Atlanta dpc/epc2100
Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.
Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
- Cisco Scientific Atlanta dpc/epc2100: affected versions not specified
- Cisco Scientific Atlanta dpc/epc2202: affected versions not specified
- Cisco Scientific Atlanta dpc/epc2203: affected versions not specified
- Cisco Scientific Atlanta dpc/epc2325: affected versions not specified
- Cisco Scientific Atlanta dpc/epc2425: affected versions not specified
- Cisco Scientific Atlanta dpc/epc2434: affected versions not specified
- Cisco Scientific Atlanta dpc/epc2505: affected versions not specified
- Cisco Scientific Atlanta dpc/epc3010: affected versions not specified
- Cisco Scientific Atlanta dpc/epc3212: affected versions not specified
- Cisco Scientific Atlanta Dpc/epc 3208: affected versions not specified
- Cisco Scientific Atlanta DPC2420: affected versions not specified
- Cisco Scientific Atlanta DPC3000/EPC3000: affected versions not specified
- Cisco Scientific Atlanta DPC3008/EPC3008: affected versions not specified
- Cisco Scientific Atlanta DPC3825: affected versions not specified
- Cisco Scientific Atlanta DPC3925: affected versions not specified
- Cisco Scientific Atlanta dpq/epq2160: affected versions not specified
- Cisco Scientific Atlanta DPQ2202: affected versions not specified
- Cisco Scientific Atlanta DPQ2425: affected versions not specified
- Cisco Scientific Atlanta DPQ3212: affected versions not specified
- Cisco Scientific Atlanta DPQ3925: affected versions not specified
- Cisco Scientific Atlanta DPR362: affected versions not specified
- Cisco Scientific Atlanta DPW700: affected versions not specified
- Cisco Scientific Atlanta DPW730: affected versions not specified
- Cisco Scientific Atlanta DPW939: affected versions not specified
- Cisco Scientific Atlanta DPW941: affected versions not specified
- and 12 more
Published 2013-12-10. Last modified 2026-06-16.