Cisco Residential Gateway Firmware vulnerabilities

3 CVEs affecting Cisco Residential Gateway Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-11589, published 2017-07-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-11588, published 2017-07-24. Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days. On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is remote command…
CVE-2017-11587, published 2017-07-24. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is directory…
CVE-2017-11589, published 2017-07-24. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is no access control…