CVE-2012-0364: Cisco Small Business SRP520-U Series Firmware

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allow remote attackers to replace the configuration file via an upload request to an unspecified URL, aka Bug ID CSCtw55495.

Affected products

• Cisco Small Business SRP520-U Series Firmware: version 1.1.0 only
• Cisco Small Business SRP520 Series Firmware: up to and including 1.01.24; version 1.01.01 only; version 1.01.09 only; version 1.01.11 only; version 1.01.19 only; version 1.01.23 only
• Cisco Small Business SRP521W
• Cisco Small Business SRP521W-U
• Cisco Small Business SRP526W
• Cisco Small Business SRP526W-U
• Cisco Small Business SRP527W
• Cisco Small Business SRP527W-U
• Cisco Small Business SRP540 Series Firmware: up to and including 1.02.01; version 1.02.00.023 only
• Cisco Small Business SRP541W
• Cisco Small Business SRP546W
• Cisco Small Business SRP547W

Published 2012-02-25. Last modified 2026-06-16.