What’s Vulnerable › Vulnerabilities

CVE-2012-0365

• Severity: critical (CVSS 9.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-02-25 · updated 2026-06-16
• Weakness: CWE-22

Description

Directory traversal vulnerability in the Local TFTP file-upload application on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to upload software to arbitrary directories via unspecified vectors, aka Bug ID CSCtw56009.

Affected products

• Cisco Small Business Srp520-U Series Firmware: 1.1.0
• Cisco Small Business Srp520 Series Firmware: through 1.01.24; 1.01.01, 1.01.09, 1.01.11, 1.01.19, 1.01.23
• Cisco Small Business Srp521W: all versions
• Cisco Small Business Srp521W-U: all versions
• Cisco Small Business Srp526W: all versions
• Cisco Small Business Srp526W-U: all versions
• Cisco Small Business Srp527W: all versions
• Cisco Small Business Srp527W-U: all versions
• Cisco Small Business Srp540 Series Firmware: through 1.02.01; 1.02.00.023
• Cisco Small Business Srp541W: all versions
• Cisco Small Business Srp546W: all versions
• Cisco Small Business Srp547W: all versions

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500
• http://www.securitytracker.com/id?1026736
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500
• http://www.securitytracker.com/id?1026736

Get alerted when CVE-2012-0365 or the next vulnerability affects your stack