CVE-2012-0365

CRÍTICO 9.0CVE-2012-0365 · Published 25/02/2012 · updated 16/06/2026

Em resumo

CVE-2012-0365 é uma vulnerabilidade CRÍTICO (CVSS 9.0) que afeta small business srp520-u series firmware (cisco), small business srp520 series firmware (cisco), small business srp540 series firmware (cisco).
Chance de exploração nos próximos 30 dias (EPSS): 2.8%, maior que 86.7% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
small business srp520-u series firmware cisco	`= 1.1.0`	No fix yet
small business srp520 series firmware cisco	`= 1.01.01= 1.01.09= 1.01.11= 1.01.19= 1.01.23≤ 1.01.24`	No fix yet
small business srp540 series firmware cisco	`= 1.02.00.023≤ 1.02.01`	No fix yet

Description

Directory traversal vulnerability in the Local TFTP file-upload application on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to upload software to arbitrary directories via unspecified vectors, aka Bug ID CSCtw56009.

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500 · Vendor Advisory
securitytracker.com/id

Mais vulnerabilidades de small business srp520-u series firmware

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free