PT-2012-2524

CVE-2012-0365

·

Published

2012-02-25

·

Updated

2018-01-04

Description by

CVSS 2.0
9.0
High
MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Cisco SRP 520 series devices versions prior to 1.1.26 Cisco SRP 520W-U and 540 series devices versions prior to 1.2.4
Description A directory traversal issue exists in the Local TFTP file-upload application, allowing remote authenticated users to upload software to arbitrary directories.
Recommendations For Cisco SRP 520 series devices, update to firmware version 1.1.26 or later. For Cisco SRP 520W-U and 540 series devices, update to firmware version 1.2.4 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2012-0365
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com