Cisco DPC3939 Wireless Residential Voice Gateway Firmware vulnerabilities

2 CVEs affecting Cisco DPC3939 Wireless Residential Voice Gateway Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-1325, published 2016-03-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-1325, published 2016-03-09. High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days. The administration interface on Cisco DPC3939B and DPC3941 devices allows remote attackers to obtain sensitive information via a crafted HTTP request, aka Bug ID CSCus49506.
CVE-2015-6361, published 2015-12-13. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. The administrative web interface on Cisco DPC3939 (XB3) devices with firmware 121109aCMCST allows remote authenticated users to execute arbitrary commands via unspecified fields, aka Bug ID…