CVE-2012-0363

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

SecuriTeam™
Beyond Security®

SecuriTeam™ Home
Ask the Team
Mailing Lists
Advertising Info
Blogs

	SecuriTeam™ in Your Inbox

	E-mail this CVE-2012-0363 to a friend

New vulnerability?
New tool?
Tell us

Credit:
The information has been provided by Michal Sajdak of Securitum.

The original article can be found at: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-0363

Website Security Scan	Code Vulnerability Test	Network Assessment Tool
Detect hidden vulnerabilities	Exhaustive automated testing	Real-time, continuous security
Get guidance from professionals	of internal or 3rd party code.	scanning for your entire network

Check for CVE-2012-0363

Vulnerability Assessment and Management.
Automated Pen Testing for 50 to 50,000 nodes
beyondsecurity.com/vulnerability-scanner

Vulnerable Systems:
* Cisco SRP 520 Series firmware prior to version 1.1.26
* Cisco SRP 520W-U Series firmware prior to version 1.2.4
* Cisco SRP 540 Series firmware prior to version 1.2.4

The web interface on Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmware before 1.2.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability," aka Bug ID CSCtt46871.

Vendor Status:
Cisco has released free software updates that address this vulnerability.

Patch Availability:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500

CVE Information:
CVE-2012-0363

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus