PT-2011-4816
CVE-2011-4005
·
تاريخ النشر
2011-11-03
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Cisco Small Business SRP521W, SRP526W, and SRP527W versions prior to 1.1.24
Cisco Small Business SRP541W, SRP546W, and SRP547W versions prior to 1.2.1
Description
A cross-site request forgery (CSRF) issue exists in the Services Ready Platform Configuration Utility web interface, allowing remote attackers to hijack the authentication of administrators for requests that execute arbitrary commands.
Recommendations
For Cisco Small Business SRP521W, SRP526W, and SRP527W, update the firmware to version 1.1.24 or later.
For Cisco Small Business SRP541W, SRP546W, and SRP547W, update the firmware to version 1.2.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾