What’s Vulnerable › Vulnerabilities

CVE-2012-0364

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-02-25 · updated 2026-06-16
• Weakness: CWE-264

Description

Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allow remote attackers to replace the configuration file via an upload request to an unspecified URL, aka Bug ID CSCtw55495.

Affected products

• Cisco Small Business Srp520-U Series Firmware: 1.1.0
• Cisco Small Business Srp520 Series Firmware: through 1.01.24; 1.01.01, 1.01.09, 1.01.11, 1.01.19, 1.01.23
• Cisco Small Business Srp521W: all versions
• Cisco Small Business Srp521W-U: all versions
• Cisco Small Business Srp526W: all versions
• Cisco Small Business Srp526W-U: all versions
• Cisco Small Business Srp527W: all versions
• Cisco Small Business Srp527W-U: all versions
• Cisco Small Business Srp540 Series Firmware: through 1.02.01; 1.02.00.023
• Cisco Small Business Srp541W: all versions
• Cisco Small Business Srp546W: all versions
• Cisco Small Business Srp547W: all versions

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500
• http://www.securitytracker.com/id?1026736
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500
• http://www.securitytracker.com/id?1026736

Get alerted when CVE-2012-0364 or the next vulnerability affects your stack