{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201111-0147",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "small business srp546w",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "*"
      },
      {
        "model": "small business srp520 series",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "1.01.23"
      },
      {
        "model": "small business srp520 series",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "1.00.06"
      },
      {
        "model": "small business srp526w",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "*"
      },
      {
        "model": "small business srp520 series",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "1.01.19_mr3"
      },
      {
        "model": "small business srp541w",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "*"
      },
      {
        "model": "small business srp521w",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "*"
      },
      {
        "model": "small business srp520 series",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "1.01.01"
      },
      {
        "model": "small business srp547w",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "*"
      },
      {
        "model": "small business srp540 series",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "1.02.01_mr2"
      },
      {
        "model": "small business srp540 series",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "1.02.00"
      },
      {
        "model": "small business srp527w",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "*"
      },
      {
        "model": "small business",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "cisco",
        "version": "srp521w firmware  1.1.24"
      },
      {
        "model": "small business",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "cisco",
        "version": "srp526w firmware  1.1.24"
      },
      {
        "model": "small business",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "cisco",
        "version": "srp527w firmware  1.1.24"
      },
      {
        "model": "small business",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "cisco",
        "version": "srp541w firmware  1.2.1"
      },
      {
        "model": "small business",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "cisco",
        "version": "srp546w firmware  1.2.1"
      },
      {
        "model": "small business",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "cisco",
        "version": "srp547w firmware  1.2.1"
      },
      {
        "model": "small business srp527w",
        "scope": null,
        "trust": 0.6,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "small business srp546w",
        "scope": null,
        "trust": 0.6,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "small business srp526w",
        "scope": null,
        "trust": 0.6,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "small business srp521w",
        "scope": null,
        "trust": 0.6,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "small business srp547w",
        "scope": null,
        "trust": 0.6,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "small business srp541w",
        "scope": null,
        "trust": 0.6,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "srp547w",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "1.2.1"
      },
      {
        "model": "srp527w",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "srp546w",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "1.2.1"
      },
      {
        "model": "srp526w",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "srp541w",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "srp547w",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "srp527w",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "1.1.24"
      },
      {
        "model": "srp521w",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "1.1.24"
      },
      {
        "model": "srp541w",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "1.2.1"
      },
      {
        "model": "srp546w",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "srp521w",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "srp526w",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "1.1.24"
      }
    ],
    "sources": [
      {
        "db": "BID",
        "id": "50495"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002754"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201111-121"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-4005"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/h:cisco:small_business",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002754"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Michal Sajdak of Securitum",
    "sources": [
      {
        "db": "BID",
        "id": "50495"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201111-121"
      }
    ],
    "trust": 0.9
  },
  "cve": "CVE-2011-4005",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.6,
            "id": "CVE-2011-4005",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 1.9,
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.6,
            "id": "VHN-51950",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:M/AU:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2011-4005",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2011-4005",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201111-121",
            "trust": 0.6,
            "value": "CRITICAL"
          },
          {
            "author": "VULHUB",
            "id": "VHN-51950",
            "trust": 0.1,
            "value": "HIGH"
          },
          {
            "author": "VULMON",
            "id": "CVE-2011-4005",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-51950"
      },
      {
        "db": "VULMON",
        "id": "CVE-2011-4005"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002754"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201111-121"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-4005"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Cross-site request forgery (CSRF) vulnerability in the Services Ready Platform Configuration Utility web interface on the Cisco Small Business SRP521W, SRP526W, and SRP527W with firmware before 1.1.24 and the Small Business SRP541W, SRP546W, and SRP547W with firmware before 1.2.1 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary commands, aka Bug ID CSCtr45124. The problem is ID CSCtr45124 It is a problem.A third party may be able to hijack the administrator\u0027s authentication requesting the execution of arbitrary commands. Cisco Small Business SRP500 Series Appliances are prone to a remote command-injection vulnerability. \nSuccessful exploits will result in the execution of arbitrary  attacker-supplied commands in the context of the root user. This may  facilitate a complete compromise. \nThis issue is being tracked by Cisco bug ID CSCtr45124. ----------------------------------------------------------------------\n\nOvum says ad hoc tools are out-dated. The best practice approach?\nFast vulnerability intelligence, threat handling, and setup in one tool. \n\nRead the new report on the Secunia VIM:\nhttp://secunia.com/products/corporate/vim/ovum_2011_request/ \n\n----------------------------------------------------------------------\n\nTITLE:\nCisco Small Business SRP520 / SRP540 Series Command Injection\nVulnerability\n\nSECUNIA ADVISORY ID:\nSA46664\n\nVERIFY ADVISORY:\nSecunia.com\nhttp://secunia.com/advisories/46664/\nCustomer Area (Credentials Required)\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=46664\n\nRELEASE DATE:\n2011-11-03\n\nDISCUSS ADVISORY:\nhttp://secunia.com/advisories/46664/#comments\n\nAVAILABLE ON SITE AND IN CUSTOMER AREA:\n * Last Update\n * Popularity\n * Comments\n * Criticality Level\n * Impact\n * Where\n * Solution Status\n * Operating System / Software\n * CVE Reference(s)\n\nhttp://secunia.com/advisories/46664/\n\nONLY AVAILABLE IN CUSTOMER AREA:\n * Authentication Level\n * Report Reliability\n * Secunia PoC\n * Secunia Analysis\n * Systems Affected\n * Approve Distribution\n * Remediation Status\n * Secunia CVSS Score\n * CVSS\n\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=46664\n\nONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:\n * AUTOMATED SCANNING\n\nhttp://secunia.com/vulnerability_scanning/personal/\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\nDESCRIPTION:\nA vulnerability has been reported in Cisco Small Business SRP520 /\nSRP540 series, which can be exploited by malicious people to\ncompromise a vulnerable system. by tricking a logged-in administrator into\nfollowing a malicious link. \n* Cisco SRP526W versions prior to 1.1.24. \n* Cisco SRP527W versions prior to 1.1.24. \n* Cisco SRP541W versions prior to 1.2.1. \n* Cisco SRP546W versions prior to 1.2.1. \n* Cisco SRP547W versions prior to 1.2.1. \n\nSOLUTION:\nUpdate to version 1.1.24 or 1.2.1. \n\nPROVIDED AND/OR DISCOVERED BY:\nThe vendor credits Michal Sajdak, Securitum. \n\nORIGINAL ADVISORY:\nhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111102-srp500\n\nOTHER REFERENCES:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nDEEP LINKS:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED DESCRIPTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED SOLUTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXPLOIT:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nCisco Security Advisory: Cisco Small Business SRP500 Series Command\nInjection Vulnerability\n\nAdvisory ID: cisco-sa-20111102-srp500\n\nRevision 1.0\n\nFor Public Release 2011 November 2 16:00  UTC (GMT)\n\n+--------------------------------------------------------------------\n\nSummary\n=======\n\nCisco Small Business SRP500 Series Services Ready Platforms contain an\noperating system command injection vulnerability. \n\nCisco has released free software updates that address this\nvulnerability. \n\nWorkarounds that mitigate this vulnerability are available. \n\nThis advisory is posted at\nhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111102-srp500. \n\nAffected Products\n=================\n\nVulnerable Products\n+------------------\n\nThe following Cisco Small Business SRP520 Series models are affected\nif running firmware prior to version 1.1.24:\n\n  * Cisco SRP521W\n  * Cisco SRP526W\n  * Cisco SRP527W\n\nThe following Cisco Small Business SRP540 Series models are affected if\nrunning firmware prior to version 1.2.1:\n\n  * Cisco SRP541W\n  * Cisco SRP546W\n  * Cisco SRP547W\n\nTo view the firmware version on a device, log in to the Services Ready\nPlatform Configuration Utility and navigate to the \"Status \u003e Router\"\npage to view information about the SRP and its firmware status. The\n\"Firmware Version\" field indicates the current running version of\nfirmware on the SRP500 Series device. \n\nProducts Confirmed Not Vulnerable\n+--------------------------------\n\nNo other Cisco products are currently known to be affected by this\nvulnerability. \n\nDetails\n=======\n\nCisco Small Business SRP500 Series Services Ready Platforms are\nflexible, cost-effective, fixed-configuration customer premises\nequipment (CPE) with embedded intelligence to enable service providers\nto create, provision, and deploy premium revenue-generating\nservices -- a variety of high-quality IP voice, data, security, and\nwireless services -- to small businesses on an as-needed basis. \n\nFor this vulnerability to be exploited, a remote attacker must\neither entice an administrator to access a crafted link or perform a\nman-in-the-middle attack, intercepting an authenticated session. \n\nVulnerability Scoring Details\n=============================\n\nCisco has provided scores for the vulnerability in this advisory\nbased on the Common Vulnerability Scoring System (CVSS). The CVSS\nscoring in this Security Advisory is done in accordance with CVSS\nversion 2.0. \n\nCVSS is a standards-based scoring method that conveys vulnerability\nseverity and helps determine urgency and priority of response. \n\nCisco has provided a base and temporal score. Customers can then\ncompute environmental scores to assist in determining the impact of\nthe vulnerability in individual networks. \n\nCisco has provided an FAQ to answer additional questions regarding\nCVSS at:\n\nhttp://www.cisco.com/web/about/security/intelligence/cvss-qandas.html\n\nCisco has also provided a CVSS calculator to help compute the\nenvironmental impact for individual networks at:\n\nhttp://intellishield.cisco.com/security/alertmanager/cvss\n\n* CSCtr45124 (\"Cisco Small Business SRP500 Series Services Ready\nPlatforms Command Injection Vulnerability\")\n\nCVSS Base Score - 9.3\n    Access Vector -            Network\n    Access Complexity -        Medium\n    Authentication -           None\n    Confidentiality Impact -   Complete\n    Integrity Impact -         Complete\n    Availability Impact -      Complete\n\nCVSS Temporal Score - 7.7\n    Exploitability -           Functional\n    Remediation Level -        Official-Fix\n    Report Confidence -        Confirmed\n\nImpact\n======\n\nSuccessful exploitation of the vulnerability may result in the execution\nof arbitrary commands on the device. \n\nSoftware Versions and Fixes\n===========================\n\nWhen considering software upgrades, also consult\nhttp://www.cisco.com/go/psirt and any subsequent advisories to determine\nexposure and a complete upgrade solution. \n\nIn all cases, customers should exercise caution to be certain the\ndevices to be upgraded contain sufficient memory and that current\nhardware and software configurations will continue to be supported\nproperly by the new release. If the information is not clear, contact\nthe Cisco Small Business Support Center or your contracted maintenance\nprovider for assistance. \n\nThis vulnerability has been fixed in the following firmware\nversions:\n\n+------------------------------------------------------------+\n|     Affected Product     |        First Fixed Release      |\n|--------------------------+---------------------------------|\n| Cisco SRP521W            | 1.1.24                          |\n|--------------------------+---------------------------------|\n| Cisco SRP526W            | 1.1.24                          |\n|--------------------------+---------------------------------|\n| Cisco SRP527W            | 1.1.24                          |\n|--------------------------+---------------------------------|\n| Cisco SRP541W            | 1.2.1                           |\n|--------------------------+---------------------------------|\n| Cisco SRP546W            | 1.2.1                           |\n|--------------------------+---------------------------------|\n| Cisco SRP547W            | 1.2.1                           |\n+------------------------------------------------------------+\n\nThe latest Cisco Small Business SRP500 Series Services Ready\nPlatforms firmware can be downloaded at\nhttp://www.cisco.com/cisco/software/navigator.html?mdfid=282736194\u0026i=rm\n\nWorkarounds\n===========\n\nThe following mitigations help limit exposure to this vulnerability. \n\n  * Disable Remote Management\n\n    Caution: Do not disable remote management if administrators\n    manage devices via the WAN connection. This action will result in\n    a loss of management connectivity to the device. \n\n    Remote Management is enabled by default. Administrators can disable\n    this feature by choosing \"Administration \u003e Web Access Management\". \n    Change the setting for the Remote Management field to Disabled. \n\n    Disabling remote management limits exposure because the\n    vulnerability can then be exploited from the inter-LAN network only. \n\n  * Limit Remote Management Access to Specific IP Addresses\n\n    If remote management is required, secure the device so that it can\n    be accessed by certain IP addresses only, rather than the default\n    setting of All IP Addresses. After choosing \"Administration \u003e Web\n    Access Management\", an administrator can change the Allowed Remote\n    IP Address setting to ensure that only devices with specified IP\n    addresses can access the device. \n\nObtaining Fixed Software\n========================\n\nCisco has released free software updates that address this\nvulnerability. Prior to deploying software, customers should consult\ntheir maintenance provider or check the software for feature set\ncompatibility and known issues specific to their environment. \n\nCustomers may only install and expect support for the feature\nsets they have purchased. By installing, downloading, accessing\nor otherwise using such software upgrades, customers agree to be\nbound by the terms of Cisco\u0027s software license terms found at\nhttp://www.cisco.com/en/US/docs/general/warranty/English/EU1KEN_.html,\nor as otherwise set forth at Cisco.com Downloads at\nhttp://www.cisco.com/public/sw-center/sw-usingswc.shtml. \n\nDo not contact psirt@cisco.com or security-alert@cisco.com for\nsoftware upgrades. \n\nCustomers should obtain upgraded software through their regular\nupdate channels. For most customers, this means that upgrades should\nbe obtained through the Software Center on Cisco\u0027s worldwide website\nat http://www.cisco.com. \n\nIf the information is not clear, please contact the Cisco Small\nBusiness Support Center or your contracted maintenance provider for\nassistance. Small Business Support Center contacts are as follows. \n\n+1 866 606 1866 (toll free from within North America)\n\n+1 408 418 1866 (toll call from anywhere in the world)\n\nCustomers should have their product serial number available. \n\nRefer to\nhttp://www.cisco.com/en/US/support/tsd_cisco_small_business_support_center_contacts.html\nfor additional support contact information, including\nlocalized telephone numbers, and instructions and e-mail addresses for\nuse in various languages. \n\nCustomers with Service Contracts\n+-------------------------------\n\nSee the Obtaining Fixed Software section of this advisory. \n\nCustomers using Third Party Support Organizations\n+------------------------------------------------\n\nSee the Obtaining Fixed Software section of this advisory. \n\nCustomers without Service Contracts\n+----------------------------------\n\nSee the Obtaining Fixed Software section of this advisory. \n\nExploitation and Public Announcements\n=====================================\n\nThe Cisco PSIRT is not aware of any malicious use of the\nvulnerability described in this advisory. This vulnerability was\ndemonstrated at a conference in San Jose, CA on November 2, 2011. \n\nThis vulnerability was reported to Cisco by Michal Sajdak of\nSecuritum, Poland. \n\nStatus of this Notice: Final\n============================\n\nTHIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY\nKIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF\nMERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE\nINFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS\nAT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS\nDOCUMENT AT ANY TIME. \n\nA stand-alone copy or Paraphrase of the text of this document that\nomits the distribution URL in the following section is an\nuncontrolled copy, and may lack important information or contain\nfactual errors. \n\n\nDistribution\n============\n\nThis advisory is posted on Cisco\u0027s worldwide website at:\n\nhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111102-srp500\n\nIn addition to worldwide web posting, a text version of this notice\nis clear-signed with the Cisco PSIRT PGP key and is posted to the\nfollowing e-mail and Usenet news recipients. \n\n  * cust-security-announce@cisco.com\n  * first-teams@first.org\n  * bugtraq@securityfocus.com\n  * vulnwatch@vulnwatch.org\n  * cisco@spot.colorado.edu\n  * cisco-nsp@puck.nether.net\n  * full-disclosure@lists.grok.org.uk\n  * comp.dcom.sys.cisco@newsgate.cisco.com\n\nFuture updates of this advisory, if any, will be placed on Cisco\u0027s\nworldwide website, but may or may not be actively announced on\nmailing lists or newsgroups. Users concerned about this problem are\nencouraged to check the above URL for any updates. \n\n\nRevision History\n================\n\n+------------------------------------------------------------+\n| Revision 1.0  | 2011-November-2  | Initial draft release.  |\n+------------------------------------------------------------+\n\nCisco Security Procedures\n=========================\n\nComplete information on reporting security vulnerabilities\nin Cisco products, obtaining assistance with security\nincidents, and registering to receive security information\nfrom Cisco, is available on Cisco\u0027s worldwide website at\nhttp://www.cisco.com/en/US/products/products_security_vulnerability_policy.html. \nThis includes instructions for press inquiries regarding\nCisco security notices. All Cisco security advisories are available at\nhttp://www.cisco.com/go/psirt. \n\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.11 (GNU/Linux)\n\niF4EAREIAAYFAk6wn+cACgkQQXnnBKKRMNAY5wD8CplHH8zrwzTGPHmrOFJyeYIm\nkg/OjEjxe60spU5+IbcA/3gNeptZTKm+fZ/lVJOIfB3RK2Gya7J0tDtnSA7Hna/j\n=XkML\n-----END PGP SIGNATURE-----\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2011-4005"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002754"
      },
      {
        "db": "BID",
        "id": "50495"
      },
      {
        "db": "VULHUB",
        "id": "VHN-51950"
      },
      {
        "db": "VULMON",
        "id": "CVE-2011-4005"
      },
      {
        "db": "PACKETSTORM",
        "id": "106582"
      },
      {
        "db": "PACKETSTORM",
        "id": "106528"
      }
    ],
    "trust": 2.25
  },
  "exploit_availability": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "reference": "https://www.scap.org.cn/vuln/vhn-51950",
        "trust": 0.1,
        "type": "unknown"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-51950"
      }
    ]
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2011-4005",
        "trust": 3.0
      },
      {
        "db": "SECUNIA",
        "id": "46664",
        "trust": 1.9
      },
      {
        "db": "BID",
        "id": "50495",
        "trust": 1.5
      },
      {
        "db": "SECTRACK",
        "id": "1026266",
        "trust": 1.2
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002754",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201111-121",
        "trust": 0.7
      },
      {
        "db": "CISCO",
        "id": "20111102 CISCO SMALL BUSINESS SRP500 SERIES COMMAND INJECTION VULNERABILITY",
        "trust": 0.6
      },
      {
        "db": "NSFOCUS",
        "id": "18116",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "106528",
        "trust": 0.2
      },
      {
        "db": "VULHUB",
        "id": "VHN-51950",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2011-4005",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "106582",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-51950"
      },
      {
        "db": "VULMON",
        "id": "CVE-2011-4005"
      },
      {
        "db": "BID",
        "id": "50495"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002754"
      },
      {
        "db": "PACKETSTORM",
        "id": "106582"
      },
      {
        "db": "PACKETSTORM",
        "id": "106528"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201111-121"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-4005"
      }
    ]
  },
  "id": "VAR-201111-0147",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-51950"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2024-11-23T22:35:34.339000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "cisco-sa-20111102-srp500",
        "trust": 0.8,
        "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111102-srp500"
      },
      {
        "title": "24495",
        "trust": 0.8,
        "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=24495"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002754"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-352",
        "trust": 1.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-51950"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002754"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-4005"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.3,
        "url": "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20111102-srp500"
      },
      {
        "trust": 1.8,
        "url": "http://secunia.com/advisories/46664"
      },
      {
        "trust": 1.2,
        "url": "http://www.securityfocus.com/bid/50495"
      },
      {
        "trust": 1.2,
        "url": "http://www.securitytracker.com/id?1026266"
      },
      {
        "trust": 1.2,
        "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71103"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-4005"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-4005"
      },
      {
        "trust": 0.6,
        "url": "http://www.nsfocus.net/vulndb/18116"
      },
      {
        "trust": 0.3,
        "url": "http://www.cisco.com/en/us/products/ps10500/index.html"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/352.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_intelligence/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/secunia_security_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/about_secunia_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_scanning/personal/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/products/corporate/vim/ovum_2011_request/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/46664/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/46664/#comments"
      },
      {
        "trust": 0.1,
        "url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=46664"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/en/us/products/products_security_vulnerability_policy.html."
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/go/psirt"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/en/us/docs/general/warranty/english/eu1ken_.html,"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/en/us/support/tsd_cisco_small_business_support_center_contacts.html"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/web/about/security/intelligence/cvss-qandas.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2011-4005"
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com."
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/go/psirt."
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/cisco/software/navigator.html?mdfid=282736194\u0026i=rm"
      },
      {
        "trust": 0.1,
        "url": "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20111102-srp500."
      },
      {
        "trust": 0.1,
        "url": "http://www.cisco.com/public/sw-center/sw-usingswc.shtml."
      },
      {
        "trust": 0.1,
        "url": "http://intellishield.cisco.com/security/alertmanager/cvss"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-51950"
      },
      {
        "db": "VULMON",
        "id": "CVE-2011-4005"
      },
      {
        "db": "BID",
        "id": "50495"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002754"
      },
      {
        "db": "PACKETSTORM",
        "id": "106582"
      },
      {
        "db": "PACKETSTORM",
        "id": "106528"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201111-121"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-4005"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULHUB",
        "id": "VHN-51950"
      },
      {
        "db": "VULMON",
        "id": "CVE-2011-4005"
      },
      {
        "db": "BID",
        "id": "50495"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002754"
      },
      {
        "db": "PACKETSTORM",
        "id": "106582"
      },
      {
        "db": "PACKETSTORM",
        "id": "106528"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201111-121"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-4005"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2011-11-03T00:00:00",
        "db": "VULHUB",
        "id": "VHN-51950"
      },
      {
        "date": "2011-11-03T00:00:00",
        "db": "VULMON",
        "id": "CVE-2011-4005"
      },
      {
        "date": "2011-11-02T00:00:00",
        "db": "BID",
        "id": "50495"
      },
      {
        "date": "2011-11-09T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2011-002754"
      },
      {
        "date": "2011-11-04T06:00:00",
        "db": "PACKETSTORM",
        "id": "106582"
      },
      {
        "date": "2011-11-02T22:50:26",
        "db": "PACKETSTORM",
        "id": "106528"
      },
      {
        "date": "1900-01-01T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201111-121"
      },
      {
        "date": "2011-11-03T10:55:08.700000",
        "db": "NVD",
        "id": "CVE-2011-4005"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2017-08-29T00:00:00",
        "db": "VULHUB",
        "id": "VHN-51950"
      },
      {
        "date": "2017-08-29T00:00:00",
        "db": "VULMON",
        "id": "CVE-2011-4005"
      },
      {
        "date": "2011-11-02T00:00:00",
        "db": "BID",
        "id": "50495"
      },
      {
        "date": "2011-11-09T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2011-002754"
      },
      {
        "date": "2011-11-14T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201111-121"
      },
      {
        "date": "2024-11-21T01:31:41.820000",
        "db": "NVD",
        "id": "CVE-2011-4005"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "106528"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201111-121"
      }
    ],
    "trust": 0.7
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Cisco Small Business Vulnerable to cross-site request forgery",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-002754"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "cross-site request forgery",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201111-121"
      }
    ],
    "trust": 0.6
  }
}