Cisco Small Business SRP526W vulnerabilities

4 CVEs affecting Cisco Small Business SRP526W, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-0365, published 2012-02-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-0365, published 2012-02-25. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. Directory traversal vulnerability in the Local TFTP file-upload application on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before…
CVE-2012-0363, published 2012-02-25. High severity, CVSS 9.0. EPSS: 2% chance of exploitation in the next 30 days. The web interface on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to execute arbitrary…
CVE-2011-4005, published 2011-11-03. High severity, CVSS 9.3. EPSS: 1.8% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the Services Ready Platform Configuration Utility web interface on the Cisco Small Business SRP521W, SRP526W, and SRP527W with firmware before…
CVE-2012-0364, published 2012-02-25. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allow remote attackers to replace the configuration file via an upload…