Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveCiscoCVE-2011-4005
HistoryNov 03, 2011 - 10:55 a.m.

CVE-2011-4005

2011-11-0310:55:08
CWE-352
cisco
web.nvd.nist.gov
28
cve-2011-4005
csrf
cisco
srp521w
srp526w
srp527w
srp541w
srp546w
srp547w
firmware vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.002

Percentile

56.0%

JSON

Cross-site request forgery (CSRF) vulnerability in the Services Ready Platform Configuration Utility web interface on the Cisco Small Business SRP521W, SRP526W, and SRP527W with firmware before 1.1.24 and the Small Business SRP541W, SRP546W, and SRP547W with firmware before 1.2.1 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary commands, aka Bug ID CSCtr45124.

Affected configurations

Nvd
Node
ciscosmall_business_srp521w
OR
ciscosmall_business_srp526w
OR
ciscosmall_business_srp527w
AND
ciscosmall_business_srp520_series_firmwareRange≤1.01.23
OR
ciscosmall_business_srp520_series_firmwareMatch1.00.06
OR
ciscosmall_business_srp520_series_firmwareMatch1.01.01
OR
ciscosmall_business_srp520_series_firmwareMatch1.01.19_mr3
Node
ciscosmall_business_srp541w
OR
ciscosmall_business_srp546w
OR
ciscosmall_business_srp547w
AND
ciscosmall_business_srp540_series_firmwareRange≤1.02.01_mr2
OR
ciscosmall_business_srp540_series_firmwareMatch1.02.00
VendorProductVersionCPE
ciscosmall_business_srp521w*cpe:2.3:h:cisco:small_business_srp521w:*:*:*:*:*:*:*:*
ciscosmall_business_srp526w*cpe:2.3:h:cisco:small_business_srp526w:*:*:*:*:*:*:*:*
ciscosmall_business_srp527w*cpe:2.3:h:cisco:small_business_srp527w:*:*:*:*:*:*:*:*
ciscosmall_business_srp520_series_firmware*cpe:2.3:a:cisco:small_business_srp520_series_firmware:*:*:*:*:*:*:*:*
ciscosmall_business_srp520_series_firmware1.00.06cpe:2.3:a:cisco:small_business_srp520_series_firmware:1.00.06:*:*:*:*:*:*:*
ciscosmall_business_srp520_series_firmware1.01.01cpe:2.3:a:cisco:small_business_srp520_series_firmware:1.01.01:*:*:*:*:*:*:*
ciscosmall_business_srp520_series_firmware1.01.19_mr3cpe:2.3:a:cisco:small_business_srp520_series_firmware:1.01.19_mr3:*:*:*:*:*:*:*
ciscosmall_business_srp541w*cpe:2.3:h:cisco:small_business_srp541w:*:*:*:*:*:*:*:*
ciscosmall_business_srp546w*cpe:2.3:h:cisco:small_business_srp546w:*:*:*:*:*:*:*:*
ciscosmall_business_srp547w*cpe:2.3:h:cisco:small_business_srp547w:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 121

Related

prion 1
securityvulns 2
cisco 1
cvelist 1
nvd 1
prion
prion
Cross site request forgery (csrf)
2011-11-03 10:55:00
securityvulns
securityvulns
Cisco Small Business SRP500 crossite request forgery
2011-11-04 00:00:00
Cisco Security Advisory: Cisco Small Business SRP500 Series Command Injection Vulnerability
2011-11-04 00:00:00
cisco
cisco
Cisco Small Business SRP500 Series Command Injection Vulnerability
2011-11-02 16:00:00
cvelist
cvelist
CVE-2011-4005
2011-11-03 10:00:00
nvd
nvd
CVE-2011-4005
2011-11-03 10:55:08

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.002

Percentile

56.0%

JSON
Related for CVE-2011-4005
prion1securityvulns2cisco1cvelist1nvd1