CVE-2012-0363: Cisco Small Business SRP520-U Series Firmware

High severity, CVSS 9.0. EPSS: 2% chance of exploitation in the next 30 days.

The web interface on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability," aka Bug ID CSCtt46871.

Affected products

• Cisco Small Business SRP520-U Series Firmware: version 1.1.0 only
• Cisco Small Business SRP520 Series Firmware: up to and including 1.01.24; version 1.01.01 only; version 1.01.09 only; version 1.01.11 only; version 1.01.19 only; version 1.01.23 only
• Cisco Small Business SRP521W
• Cisco Small Business SRP521W-U
• Cisco Small Business SRP526W
• Cisco Small Business SRP526W-U
• Cisco Small Business SRP527W
• Cisco Small Business SRP527W-U
• Cisco Small Business SRP540 Series Firmware: up to and including 1.02.01; version 1.02.00.023 only
• Cisco Small Business SRP541W
• Cisco Small Business SRP546W
• Cisco Small Business SRP547W

Published 2012-02-25. Last modified 2026-06-16.