Cisco EPC3925 vulnerabilities

2 CVEs affecting Cisco EPC3925, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3306, published 2014-07-18.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-3306, published 2014-07-18. High severity, CVSS 10.0. EPSS: 7% chance of exploitation in the next 30 days. The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway products allows remote attackers to execute arbitrary code via…
• CVE-2013-6976, published 2013-12-19. Medium severity, CVSS 6.8. EPSS: 3.7% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in goform/Quick_setup on Cisco EPC3925 devices allows remote attackers to hijack the authentication of administrators for requests that change a…