The web server on Cisco DPC3010 DPC3212 DPC3825 DPC3925 DPQ3925 EPC3010 EPC3212 EPC3825 and EPC3925 Wireless Residential Gateway products allows remote attackers to execute arbitrary code via a crafted HTTP request aka Bug ID CSCup40808.