CVE:CVE-2012-0363
CNNVD:CNNVD-201202-458
Cisco SRP 520系列设备1.1.26之前版本，SRP 520W-U和540系列设备1.2.4之前版本的web接口中存在漏洞。远程认证用户可利用该漏洞借助与“命令注入漏洞”相关的未明向量执行任意命令，也称Bug ID CSCtt46871。
solution:Upgrade cisco small_business_srp520_series_firmware to a higher version than 1.01.24,1.01.01,1.01.09,1.01.11,1.01.19,1.01.23,and avoid the version (,1.01.24],1.01.01,1.01.09,1.01.11,1.01.19,1.01.23; Upgrade cisco small_business_srp521w to a higher version than *; Upgrade cisco small_business_srp526w to a higher version than *; Upgrade cisco small_business_srp527w to a higher version than *; Upgrade cisco small_business_srp520-u_series_firmware to a higher version than 1.1.0,and avoid the version 1.1.0; Upgrade cisco small_business_srp521w-u to a higher version than *; Upgrade cisco small_business_srp526w-u to a higher version than *; Upgrade cisco small_business_srp527w-u to a higher version than *; Upgrade cisco small_business_srp540_series_firmware to a higher version than 1.02.01,1.02.00.023,and avoid the version (,1.02.01],1.02.00.023; Upgrade cisco small_business_srp541w to a higher version than *; Upgrade cisco small_business_srp546w to a higher version than *; Upgrade cisco small_business_srp547w to a higher version than *