CVE-2012-3047

Name: CVE-2012-3047
Creator: NVD / NIST
Published: 2013-12-10T19:55:03.967+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.94%

Last modified Jun 16, 2026

CVE-2012-3047 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.. EPSS estimates a 0.94% chance of exploitation in the next 30 days.

Description

Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Metrics

EPSS Probability

0.94%

56.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-79

Affected Software

Vendor	Product	Versions
Cisco	Scientific Atlanta Dpc\/Epc 3208	All versions
Cisco	Scientific Atlanta Dpc\/Epc2100	All versions
Cisco	Scientific Atlanta Dpc\/Epc2202	All versions
Cisco	Scientific Atlanta Dpc\/Epc2203	All versions
Cisco	Scientific Atlanta Dpc\/Epc2325	All versions
Cisco	Scientific Atlanta Dpc\/Epc2425	All versions
Cisco	Scientific Atlanta Dpc\/Epc2434	All versions
Cisco	Scientific Atlanta Dpc\/Epc2505	All versions
Cisco	Scientific Atlanta Dpc\/Epc3010	All versions
Cisco	Scientific Atlanta Dpc\/Epc3212	All versions
Cisco	Scientific Atlanta Dpc2420	All versions
Cisco	Scientific Atlanta Dpc3000\/Epc3000	All versions
Cisco	Scientific Atlanta Dpc3008\/Epc3008	All versions
Cisco	Scientific Atlanta Dpc3825	All versions
Cisco	Scientific Atlanta Dpc3925	All versions
Cisco	Scientific Atlanta Dpq\/Epq2160	All versions
Cisco	Scientific Atlanta Dpq2202	All versions
Cisco	Scientific Atlanta Dpq2425	All versions
Cisco	Scientific Atlanta Dpq3212	All versions
Cisco	Scientific Atlanta Dpq3925	All versions
Cisco	Scientific Atlanta Dpr362	All versions
Cisco	Scientific Atlanta Dpw700	All versions
Cisco	Scientific Atlanta Dpw730	All versions
Cisco	Scientific Atlanta Dpw939	All versions
Cisco	Scientific Atlanta Dpw941	All versions
Cisco	Scientific Atlanta Dpx\/Epx2100	All versions
Cisco	Scientific Atlanta Dpx\/Epx2203	All versions
Cisco	Scientific Atlanta Dpx\/Epx2203c	All versions
Cisco	Scientific Atlanta Dpx100\/120	All versions
Cisco	Scientific Atlanta Dpx110	All versions
Cisco	Scientific Atlanta Dpx130	All versions
Cisco	Scientific Atlanta Dpx213	All versions
Cisco	Scientific Atlanta Dpx2213	All versions
Cisco	Scientific Atlanta Epc2420	All versions
Cisco	Scientific Atlanta Epc3825	All versions
Cisco	Scientific Atlanta Epc3925	All versions
Cisco	Scientific Atlanta Wag310g	All versions

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=26036Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=26036Vendor Advisory

Timeline

Published: Dec 10, 2013
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2012-3047?

How severe is CVE-2012-3047?

Severity scoring for CVE-2012-3047 is pending analysis. The EPSS model estimates a 0.94% probability of exploitation in the next 30 days.

How do I fix CVE-2012-3047?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2012-3047?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST