CVE-2011-4005: CSRF
Cross-site request forgery (CSRF) vulnerability in the Services Ready Platform Configuration Utility web interface on the Cisco Small Business SRP521W, SRP526W, and SRP527W with firmware before 1.1.24 and the Small Business SRP541W, SRP546W, and SRP547W with firmware before 1.2.1 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary commands, aka Bug ID CSCtr45124.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4005?
CVE-2011-4005 has been classified with a medium severity rating due to its potential for exploit through cross-site request forgery.
How do I fix CVE-2011-4005?
To remediate CVE-2011-4005, upgrade the firmware of affected Cisco Small Business SRP devices to versions 1.1.24 or above for SRP520 series and 1.2.1 or later for SRP540 series.
Which devices are affected by CVE-2011-4005?
CVE-2011-4005 affects several models including the Cisco Small Business SRP521W, SRP526W, SRP527W, SRP541W, SRP546W, and SRP547W with specific firmware versions.
What are the potential consequences of CVE-2011-4005?
Exploitation of CVE-2011-4005 could allow attackers to perform unauthorized actions on the affected devices through malicious HTTP requests.
Is there a workaround for CVE-2011-4005?
There is no documented workaround for CVE-2011-4005; upgrading the firmware is the recommended approach to mitigate the vulnerability.