Cisco patches serious flaws in cable modems and home gateways
Cisco Systems has patched high-impact vulnerabilities in several of its cable modem and residential gateway devices that are distributed by some ISPs to their customers.
The embedded Web server in the Cisco Cable Modem with Digital Voice models DPC2203 and EPC2203 contains a buffer overflow vulnerability that can be exploited remotely without authentication.
The flaw could be exploited by sending specially crafted HTTP requests to the Web server and could result in arbitrary code execution.
Customers should contact their service providers to ensure that the software version installed on their devices includes the patch for this issue, Cisco said in an advisory.
To read this article in full or to leave a comment, please click here