Cisco Addresses Wireless Residential Gateway Vulnerability

["US-CERT" <US-CERT () ncas us-cert gov>]

NCCIC / US-CERT

National Cyber Awareness System:

Cisco Addresses Wireless Residential Gateway Vulnerability [ 
https://www.us-cert.gov/ncas/current-activity/2014/07/16/Cisco-Addresses-Wireless-Residential-Gateway-Vulnerability ] 
07/16/2014 04:33 PM EDT 
Original release date: July 16, 2014

Cisco has released an advisory to address a vulnerability in the web server used in multiple Wireless Residential 
Gateway products that could allow an unauthenticated, remote attacker to crash the web server and execute arbitrary 
code with elevated privileges.


  * Cisco products affected by this vulnerability include: 
  * Cisco DPC3212 VoIP Cable Modem 
  * Cisco DPC3825 8x4 DOCSIS 3.0 Wireless Residential Gateway 
  * Cisco EPC3212 VoIP Cable Modem 
  * Cisco EPC3825 8x4 DOCSIS 3.0 Wireless Residential Gateway 
  * Cisco Model DPC3010 DOCSIS 3.0 8x4 Cable Modem 
  * Cisco Model DPC3925 8x4 DOCSIS 3.0 with Wireless Residential Gateway with EDVA 
  * Cisco Model DPQ3925 8x4 DOCSIS 3.0 Wireless Residential Gateway with EDVA 
  * Cisco Model EPC3010 DOCSIS 3.0 Cable Modem 
  * Cisco Model EPC3925 8x4 DOCSIS 3.0 with Wireless Residential Gateway with EDVA 

Users and administrators are encouraged to review the Cisco Advisory [ 
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ciscosa-20140716-cm ] and apply the necessary 
updates.

________________________________________________________________________

This product is provided subject to this Notification [ http://www.us-cert.gov/privacy/notification ] and this Privacy 
& Use [ http://www.us-cert.gov/privacy/ ] policy.

________________________________________________________________________

OTHER RESOURCES: Contact Us [ http://www.us-cert.gov/contact-us/ ] | Security Publications [ 
http://www.us-cert.gov/security-publications ] | Alerts and Tips [ http://www.us-cert.gov/ncas ] | Related Resources [ 
http://www.us-cert.gov/related-resources ] 

STAY CONNECTED: Sign up for email updates [ http://public.govdelivery.com/accounts/USDHSUSCERT/subscriber/new ]