Cisco Small Business SRP527W-U vulnerabilities

3 CVEs affecting Cisco Small Business SRP527W-U, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-0365, published 2012-02-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-0365, published 2012-02-25. High severity, CVSS 9.0. EPSS: 2.8% chance of exploitation in the next 30 days. Directory traversal vulnerability in the Local TFTP file-upload application on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before…
CVE-2012-0363, published 2012-02-25. High severity, CVSS 9.0. EPSS: 2% chance of exploitation in the next 30 days. The web interface on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to execute arbitrary…
CVE-2012-0364, published 2012-02-25. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allow remote attackers to replace the configuration file via an upload…