What is the CVSS score of CVE-2012-0364?

CVE-2012-0364 has a CVSS 2.0 base score of 7.8 (High). CVSS vector: AV:N/AC:L/Au:N/C:N/I:C/A:N. EPSS exploitation probability: 0.7%.

Is there a patch available for CVE-2012-0364?

Yes, a patch is available for CVE-2012-0364. Update the affected software to the latest version immediately.

Small Business Srp520 Series Firmware CVE-2012-0364

HIGH

Permissions, Privileges, and Access Controls (CWE-264)

2012-02-25 psirt@cisco.com

Privilege Escalation Cisco Small Business Srp520 Series Firmware Small Business Srp521W Small Business Srp526W Small Business Srp527W Small Business Srp520 U Series Firmware Small Business Srp521W U Small Business Srp526W U Small Business Srp527W U Small Business Srp540 Series Firmware Small Business Srp541W Small Business Srp546W Small Business Srp547W

7.8

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:N/AC:L/Au:N/C:N/I:C/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:N/I:C/A:N

Attack Vector

Network

Attack Complexity

Low

Confidentiality

None

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Feb 25, 2012 - 04:21 cve.org

HIGH 7.8

DescriptionCVE.org

Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allow remote attackers to replace the configuration file via an upload request to an unspecified URL, aka Bug ID CSCtw55495.

AnalysisAI

Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allow remote attackers to replace the configuration file via an upload. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-264. Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allow remote attackers to replace the configuration file via an upload request to an unspecified URL, aka Bug ID CSCtw55495. Affected products include: Cisco Small Business Srp520 Series Firmware, Cisco Small Business Srp521W, Cisco Small Business Srp526W, Cisco Small Business Srp527W, Cisco Small Business Srp520-U Series Firmware. Version information: before 1.1.26.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.