CVE-2015-6402
cisco epc3928 docsis 3.0 8x4 wireless residential gateway with embedded digital voice adapter: no CVSS score yet. EPSS 7.2% chance of exploitation in the next 30 days.
Cross-site scripting (XSS) vulnerability in the management interface on Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCux24935.
- EPSS
- 7.2% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cisco:epc3928_docsis_3.0_8x4_wireless_residential_gateway_with_embedded_digital_voice_adapter
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151208-wrg
- http://www.securitytracker.com/id/1034346
- https://www.exploit-db.com/exploits/39904/
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151208-wrg
- http://www.securitytracker.com/id/1034346