The administrative web interface on Cisco DPC3939 (XB3) devices with firmware 121109aCMCST allows remote authenticated users to execute arbitrary commands via unspecified fields, aka Bug ID CSCuw86170.Referenceshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151208-xb3