CVE-2012-0363
Severity CVSS v4.0:
Pending analysis
Type:
CWE-94
Code Injection
Publication date:
25/02/2012
Last modified:
11/04/2025
Description
The web interface on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability," aka Bug ID CSCtt46871.
Impact
Base Score 2.0
9.00
Severity 2.0
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:cisco:small_business_srp520_series_firmware:*:*:*:*:*:*:*:* | 1.01.24 (including) | |
| cpe:2.3:a:cisco:small_business_srp520_series_firmware:1.01.01:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:small_business_srp520_series_firmware:1.01.09:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:small_business_srp520_series_firmware:1.01.11:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:small_business_srp520_series_firmware:1.01.19:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:small_business_srp520_series_firmware:1.01.23:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:small_business_srp521w:*:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:small_business_srp526w:*:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:small_business_srp527w:*:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:small_business_srp520-u_series_firmware:1.1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:small_business_srp521w-u:*:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:small_business_srp526w-u:*:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:small_business_srp527w-u:*:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:small_business_srp540_series_firmware:*:*:*:*:*:*:*:* | 1.02.01 (including) | |
| cpe:2.3:a:cisco:small_business_srp540_series_firmware:1.02.00.023:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page