CVE-2012-0363
9.0
Vector
AV:N/AC:L/Au:S/C:C/I:C/A:C
Exploitability: 8.0 / Impact: 10.0
Source: NVD
Description
The web interface on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability," aka Bug ID CSCtt46871.
Affected (18)
Products: Cisco: Small Business Srp520 Series Firmware, Small Business Srp521w, Small Business Srp526w, Small Business Srp527w, Small Business Srp520 U Series Firmware, Small Business Srp521w U, Small Business Srp526w U, Small Business Srp527w U, Small Business Srp540 Series Firmware, Small Business Srp541w, Small Business Srp546w, Small Business Srp547w
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.01.24 | |
| All versions | |
| All versions | |
| All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.1.0 | |
| All versions | |
| All versions | |
| All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.02.01 | |
| All versions | |
| All versions | |
| All versions |
References (4)
Source: psirt@cisco.com
PatchVendor Advisory
Source: psirt@cisco.com
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.