PT-2016-4712 · Cisco · Cisco Dpc3941+1

Published 2016-03-09 · Updated 2016-12-03 · CVE-2016-1325

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco DPC3939B (affected versions not specified) Cisco DPC3941 (affected versions not specified)

Description The administration interface on the devices allows remote attackers to obtain sensitive information via a crafted HTTP request.

Recommendations For Cisco DPC3939B, at the moment, there is no information about a newer version that contains a fix for this issue. For Cisco DPC3941, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-1325

Affected Products

Cisco Dpc3939B

Cisco Dpc3941

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-1325 · Security Note
• https://osv.dev/vulnerability/CVE-2016-1325 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160309-rgid · Vendor Advisory
• http://securitytracker.com/id/1035232 · Note
• http://securityfocus.com/bid/84278 · Note