What’s Vulnerable › Vulnerabilities

CVE-2012-0363

• Severity: critical (CVSS 9.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-02-25 · updated 2026-06-16
• Weakness: CWE-94

Description

The web interface on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability," aka Bug ID CSCtt46871.

Affected products

• Cisco Small Business Srp520-U Series Firmware: 1.1.0
• Cisco Small Business Srp520 Series Firmware: through 1.01.24; 1.01.01, 1.01.09, 1.01.11, 1.01.19, 1.01.23
• Cisco Small Business Srp521W: all versions
• Cisco Small Business Srp521W-U: all versions
• Cisco Small Business Srp526W: all versions
• Cisco Small Business Srp526W-U: all versions
• Cisco Small Business Srp527W: all versions
• Cisco Small Business Srp527W-U: all versions
• Cisco Small Business Srp540 Series Firmware: through 1.02.01; 1.02.00.023
• Cisco Small Business Srp541W: all versions
• Cisco Small Business Srp546W: all versions
• Cisco Small Business Srp547W: all versions

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500
• http://www.securitytracker.com/id?1026736
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500
• http://www.securitytracker.com/id?1026736

Get alerted when CVE-2012-0363 or the next vulnerability affects your stack