CVE-2012-0365: Path Traversal

Q: What is the severity of CVE-2012-0365?

CVE-2012-0365 is classified as a high severity vulnerability due to its potential for arbitrary file uploads.

Q: Who is affected by CVE-2012-0365?

CVE-2012-0365 affects users of Cisco SRP 520 series devices with firmware versions prior to 1.1.26 and 540 series devices prior to 1.2.4.

Q: How do I fix CVE-2012-0365?

To fix CVE-2012-0365, upgrade your Cisco device firmware to the latest version specified in the advisory.

Q: What type of vulnerability is CVE-2012-0365?

CVE-2012-0365 is a directory traversal vulnerability that allows remote authenticated users to upload files to arbitrary directories.

Q: What are the consequences of exploiting CVE-2012-0365?

Exploiting CVE-2012-0365 can lead to unauthorized software uploads, potentially compromising the affected device's integrity.

Published Feb 25, 2012

Updated

Directory traversal vulnerability in the Local TFTP file-upload application on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to upload software to arbitrary directories via unspecified vectors, aka Bug ID CSCtw56009.

Affected Software

18 affected components

Cisco Small Business Srp520 Series Firmware<=1.01.24

Cisco Small Business Srp520 Series Firmware=1.01.01

Cisco Small Business Srp520 Series Firmware=1.01.09

Cisco Small Business Srp520 Series Firmware=1.01.11

Cisco Small Business Srp520 Series Firmware=1.01.19

Cisco Small Business Srp520 Series Firmware=1.01.23

Cisco Small Business SRP521W

Cisco Small Business Srp526w

Cisco Small Business Srp527w

Cisco Small Business Srp520-u Series Firmware=1.1.0

Cisco Small Business Srp521w-u

Cisco Small Business Srp526w-u

Cisco Small Business Srp527w-u

Cisco Small Business Srp540 Series Firmware<=1.02.01

Cisco Small Business Srp540 Series Firmware=1.02.00.023

Cisco Small Business SRP541W

Cisco Small Business Srp546w

Cisco Small Business Srp547w

Event History

Feb 25, 2012

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0365?

CVE-2012-0365 is classified as a high severity vulnerability due to its potential for arbitrary file uploads.

Who is affected by CVE-2012-0365?

CVE-2012-0365 affects users of Cisco SRP 520 series devices with firmware versions prior to 1.1.26 and 540 series devices prior to 1.2.4.

How do I fix CVE-2012-0365?

To fix CVE-2012-0365, upgrade your Cisco device firmware to the latest version specified in the advisory.

What type of vulnerability is CVE-2012-0365?

CVE-2012-0365 is a directory traversal vulnerability that allows remote authenticated users to upload files to arbitrary directories.

What are the consequences of exploiting CVE-2012-0365?