CVE-2012-3047
Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Does this matter?
Lower severity and a low EPSS score (0.94%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 0.94% probability · 61th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- cisco/scientific atlanta dpc\/epc 3208 · cisco/scientific atlanta dpc\/epc2100 · cisco/scientific atlanta dpc\/epc2202 · cisco/scientific atlanta dpc\/epc2203 · cisco/scientific atlanta dpc\/epc2325 · cisco/scientific atlanta dpc\/epc2425 · cisco/scientific atlanta dpc\/epc2434 · cisco/scientific atlanta dpc\/epc2505 · cisco/scientific atlanta dpc\/epc3010 · cisco/scientific atlanta dpc\/epc3212 · cisco/scientific atlanta dpc2420 · cisco/scientific atlanta dpc3000\/epc3000 · cisco/scientific atlanta dpc3008\/epc3008 · cisco/scientific atlanta dpc3825 · cisco/scientific atlanta dpc3925 · cisco/scientific atlanta dpq\/epq2160 · cisco/scientific atlanta dpq2202 · cisco/scientific atlanta dpq2425 · cisco/scientific atlanta dpq3212 · cisco/scientific atlanta dpq3925 · +17 more
- Source
- psirt@cisco.com
EPSS 0.9% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.