CVE-2011-4005

Name of the Vulnerable Software and Affected Versions Cisco Small Business SRP521W, SRP526W, and SRP527W versions prior to 1.1.24 Cisco Small Business SRP541W, SRP546W, and SRP547W versions prior to 1.2.1

Description A cross-site request forgery (CSRF) issue exists in the Services Ready Platform Configuration Utility web interface, allowing remote attackers to hijack the authentication of administrators for requests that execute arbitrary commands.

Recommendations For Cisco Small Business SRP521W, SRP526W, and SRP527W, update the firmware to version 1.1.24 or later. For Cisco Small Business SRP541W, SRP546W, and SRP547W, update the firmware to version 1.2.1 or later.