PT-2012-2524

CVE-2012-0365

·

Publicado

2012-02-25

·

Atualizado

2018-01-04

Descrição por

CVSS 2.0
9.0
Alta
MétricasAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Cisco SRP 520 series devices versions prior to 1.1.26 Cisco SRP 520W-U and 540 series devices versions prior to 1.2.4
Description A directory traversal issue exists in the Local TFTP file-upload application, allowing remote authenticated users to upload software to arbitrary directories.
Recommendations For Cisco SRP 520 series devices, update to firmware version 1.1.26 or later. For Cisco SRP 520W-U and 540 series devices, update to firmware version 1.2.4 or later.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Identificadores relacionados
CVE-2012-0365
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com