New Contributor
•
5 Messages
HIGH Vulnerability CVE-2014-3306 Cisco DPC3010 Firmware Upgrade?
Hi I have a Cisco DPC3010, it looks like I have the default initial Firmware. I was wondering when COX will be sending out a update to fix the High Vulnerabilities published in July? Below is my modem information minus the MAC and the Vulnerability I am talking about. Vulnerability Summary for CVE-2014-3306
Cisco webpage says they have had a fix release since July 18th 2014. http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ciscosa-20140716-cm
| Model: | Cisco DPC3010 |
| Vendor: | Cisco |
| Hardware Revision: | 1.0 |
| MAC Address: | |
| Bootloader Revision: | 2.3.0_R1 |
| Current Software Revision: | d3000-v302r125533-120716a-COX |
| Firmware Name: | d3000-v302r125533-120716a-COX.bin |
| Firmware Build Time: | Jul 16 17:16:46 2012 |
| Cable Modem Status: | Operational |
https://www.us-cert.gov/ncas/bulletins/SB14-202
| Primary Vendor -- Product | Description | Published | CVSS Score | Source & Patch Info |
|---|---|---|---|---|
| cisco -- dpc3010 | The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway products allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCup40808. | 2014-07-17 | 10.0 | CVE-2014-3306 |
Related Content
Closed
1
0
Closed
1
0
Accepted Solution
Closed
8
0
Accepted Solution
Closed
5
0
Closed
6
0

Old_Navy_Guy
New Contributor
•
5 Messages
I work in the IT technology field ,what is the estimated time frame for the approval process? The manufacture (Cisco) has released free software updates that address this vulnerability on 18 July 2014.
0
0