Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-4005

Cross-site request forgery (CSRF) vulnerability in the Services Ready Platform Configuration Utility web interface on the Cisco Small Business SRP521W, SRP526W, and SRP527W with firmware before 1.1.24 and the Small Business SRP541W, SRP546W, and SRP547W with firmware before 1.2.1 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary commands, aka Bug ID CSCtr45124.

Published

2011-11-03T10:55:08.700

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-352
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Hardware cisco small_business_srp521w * Yes
Hardware cisco small_business_srp526w * Yes
Hardware cisco small_business_srp527w * Yes
Application cisco small_business_srp520_series_firmware ≤ 1.01.23 Yes
Application cisco small_business_srp520_series_firmware 1.00.06 Yes
Application cisco small_business_srp520_series_firmware 1.01.01 Yes
Application cisco small_business_srp520_series_firmware 1.01.19_mr3 Yes
Hardware cisco small_business_srp541w * Yes
Hardware cisco small_business_srp546w * Yes
Hardware cisco small_business_srp547w * Yes
Application cisco small_business_srp540_series_firmware ≤ 1.02.01_mr2 Yes
Application cisco small_business_srp540_series_firmware 1.02.00 Yes
References