PT-2012-2523 · Cisco · Cisco Srp 520W-U+2

Publicado 2012-02-25 · Atualizado 2018-01-04 · CVE-2012-0364

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Cisco SRP 520 series devices versions prior to 1.1.26 Cisco SRP 520W-U and 540 series devices versions prior to 1.2.4

Description The issue allows remote attackers to replace the configuration file via an upload request to an unspecified URL.

Recommendations For Cisco SRP 520 series devices, update the firmware to version 1.1.26 or later. For Cisco SRP 520W-U and 540 series devices, update the firmware to version 1.2.4 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-0364

Produtos afetados

Cisco Srp 520 Series

Cisco Srp 520W-U

Cisco Srp 540 Series

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-0364 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500 · Aviso do Fabricante
• http://securitytracker.com/id?1026736 · Nota