CVE-2012-0365

Published: Feb 25, 2012Modified: Apr 29, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

Directory traversal vulnerability in the Local TFTP file-upload application on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to upload software to arbitrary directories via unspecified vectors, aka Bug ID CSCtw56009.

Affected (18)

Products: Cisco: Small Business Srp520 Series Firmware, Small Business Srp521w, Small Business Srp526w, Small Business Srp527w, Small Business Srp520 U Series Firmware, Small Business Srp521w U, Small Business Srp526w U, Small Business Srp527w U, Small Business Srp540 Series Firmware, Small Business Srp541w, Small Business Srp546w, Small Business Srp547w

Cisco

12 products

Small Business Srp520 Series Firmware

Small Business Srp521w

Small Business Srp526w

Small Business Srp527w

Small Business Srp520 U Series Firmware

Small Business Srp521w U

Small Business Srp526w U

Small Business Srp527w U

Small Business Srp540 Series Firmware

Small Business Srp541w

Small Business Srp546w

Small Business Srp547w

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Cisco Small Business Srp520 Series Firmware	Up to 1.01.24
Cisco Small Business Srp520 Series Firmware	Version 1.01.01
Cisco Small Business Srp520 Series Firmware	Version 1.01.09
Cisco Small Business Srp520 Series Firmware	Version 1.01.11
Cisco Small Business Srp520 Series Firmware	Version 1.01.19
Cisco Small Business Srp520 Series Firmware	Version 1.01.23
Cisco Small Business Srp521w	All versions
Cisco Small Business Srp526w	All versions
Cisco Small Business Srp527w	All versions

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Cisco Small Business Srp520 U Series Firmware	Version 1.1.0
Cisco Small Business Srp521w U	All versions
Cisco Small Business Srp526w U	All versions
Cisco Small Business Srp527w U	All versions

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Cisco Small Business Srp540 Series Firmware	Up to 1.02.01
Cisco Small Business Srp540 Series Firmware	Version 1.02.00.023
Cisco Small Business Srp541w	All versions
Cisco Small Business Srp546w	All versions
Cisco Small Business Srp547w	All versions

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (4)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id?1026736

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id?1026736

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.