Lucene search

[email protected]CVE-2012-0363

HistoryFeb 25, 2012 - 4:21 a.m.

CVE-2012-0363

2012-02-2504:21:42

CWE-94

[email protected]

web.nvd.nist.gov

cisco

srp 520

srp 540

command injection

cve-2012-0363

nvd

bug id csctt46871

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.8%

JSON

The web interface on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, related to a “command injection vulnerability,” aka Bug ID CSCtt46871.

Affected configurations

NVD

Node

ciscosmall_business_srp520_series_firmwareRange≤1.01.24

ciscosmall_business_srp520_series_firmwareMatch1.01.01

ciscosmall_business_srp520_series_firmwareMatch1.01.09

ciscosmall_business_srp520_series_firmwareMatch1.01.11

ciscosmall_business_srp520_series_firmwareMatch1.01.19

ciscosmall_business_srp520_series_firmwareMatch1.01.23

AND

ciscosmall_business_srp521w

ciscosmall_business_srp526w

ciscosmall_business_srp527w

Node

ciscosmall_business_srp520-u_series_firmwareMatch1.1.0

AND

ciscosmall_business_srp521w-u

ciscosmall_business_srp526w-u

ciscosmall_business_srp527w-u

Node

ciscosmall_business_srp540_series_firmwareRange≤1.02.01

ciscosmall_business_srp540_series_firmwareMatch1.02.00.023

AND

ciscosmall_business_srp541w

ciscosmall_business_srp546w

ciscosmall_business_srp547w

CPENameOperatorVersion
cisco:small_business_srp520_series_firmwarecisco small business srp520 series firmwarele1.01.24
cisco:small_business_srp520_series_firmwarecisco small business srp520 series firmwareeq1.01.01
cisco:small_business_srp520_series_firmwarecisco small business srp520 series firmwareeq1.01.09
cisco:small_business_srp520_series_firmwarecisco small business srp520 series firmwareeq1.01.11
cisco:small_business_srp520_series_firmwarecisco small business srp520 series firmwareeq1.01.19
cisco:small_business_srp520_series_firmwarecisco small business srp520 series firmwareeq1.01.23
cisco:small_business_srp521wcisco small business srp521weq*
cisco:small_business_srp526wcisco small business srp526weq*
cisco:small_business_srp527wcisco small business srp527weq*

CPE	Name	Operator	Version
cisco:small_business_srp520_series_firmware	cisco small business srp520 series firmware	le	1.01.24
cisco:small_business_srp520_series_firmware	cisco small business srp520 series firmware	eq	1.01.01
cisco:small_business_srp520_series_firmware	cisco small business srp520 series firmware	eq	1.01.09
cisco:small_business_srp520_series_firmware	cisco small business srp520 series firmware	eq	1.01.11
cisco:small_business_srp520_series_firmware	cisco small business srp520 series firmware	eq	1.01.19
cisco:small_business_srp520_series_firmware	cisco small business srp520 series firmware	eq	1.01.23
cisco:small_business_srp521w	cisco small business srp521w	eq	*
cisco:small_business_srp526w	cisco small business srp526w	eq	*
cisco:small_business_srp527w	cisco small business srp527w	eq	*