Unrated severityNVD Advisory· Published Feb 25, 2012· Updated Apr 29, 2026
CVE-2012-0365
CVE-2012-0365
Description
Directory traversal vulnerability in the Local TFTP file-upload application on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to upload software to arbitrary directories via unspecified vectors, aka Bug ID CSCtw56009.
Affected products
18cpe:2.3:a:cisco:small_business_srp520_series_firmware:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:cisco:small_business_srp520_series_firmware:*:*:*:*:*:*:*:*range: <=1.01.24
- cpe:2.3:a:cisco:small_business_srp520_series_firmware:1.01.01:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:small_business_srp520_series_firmware:1.01.09:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:small_business_srp520_series_firmware:1.01.11:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:small_business_srp520_series_firmware:1.01.19:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:small_business_srp520_series_firmware:1.01.23:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:small_business_srp521w:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:small_business_srp526w:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:small_business_srp527w:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:small_business_srp520-u_series_firmware:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:small_business_srp521w-u:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:small_business_srp526w-u:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:small_business_srp527w-u:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:small_business_srp540_series_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:small_business_srp540_series_firmware:*:*:*:*:*:*:*:*range: <=1.02.01
- cpe:2.3:a:cisco:small_business_srp540_series_firmware:1.02.00.023:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:small_business_srp541w:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:small_business_srp546w:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:small_business_srp547w:*:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.