VulnerabilityModified
CVE-2014-3307
The DHCP client implementation in Universal Small Cell firmware on Cisco Small Cell products allows remote attackers to execute arbitrary commands via crafted DHCP messages, aka Bug ID CSCup47513.
MEDIUM 6.8EPSS 1.30%
Does this matter?
Lower severity and a low EPSS score (1.30%). Track it; it rarely justifies an emergency change on its own.
Description
The DHCP client implementation in Universal Small Cell firmware on Cisco Small Cell products allows remote attackers to execute arbitrary commands via crafted DHCP messages, aka Bug ID CSCup47513.
- CVSS 2.0
- 6.8 MEDIUMAV:A/AC:H/Au:N/C:C/I:C/A:C
- EPSS
- 1.30% probability · 69th percentile
- CISA KEV
- Not listed
- Affected
- cisco/universal small cell series firmware
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/59024
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3307Vendor Advisory
- http://www.securityfocus.com/bid/68307
- http://www.securitytracker.com/id/1030509
- http://secunia.com/advisories/59024
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3307Vendor Advisory
- http://www.securityfocus.com/bid/68307
- http://www.securitytracker.com/id/1030509
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.