{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T13:56:21Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-20120223-srp500","slug":"cisco-sa-20120223-srp500","vendor":"Cisco","title":"Cisco Small Business SRP 500 Series Multiple Vulnerabilities","summary":"Cisco Small Business (SRP 500) Series Services Ready Platforms contain the following three vulnerabilities: Cisco SRP 500 Series Web Interface Command Injection Vulnerability Cisco SRP 500 Series Unauthenticated Configuration Upload Vulnerability Cisco SRP 500 Series Directory Traversal Vulnerability These vulnerabilities can be exploited using sessions to the Services Ready Platform Configuration Utility web interface. These vulnerabilities could be exploited from the local LAN side of the SRP device by default configuration and the WAN side of the SRP device if remote management is enabled.  Remote management is disabled by default. Cisco has released software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500","severity":"Critical","published_at":"2012-02-24T00:00:00Z","updated_at":"2012-02-24T00:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-20120223-srp500/csaf/cisco-sa-20120223-srp500.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":3,"visible_product_count":1,"public_evidence_count":3,"kev_count":0,"highest_epss":0.03241},"cves":[{"id":"CVE-2012-0365","kev":false,"epss":{"score":0.03241,"percentile":0.86907,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"}},{"id":"CVE-2012-0363","kev":false,"epss":{"score":0.02198,"percentile":0.80518,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"}},{"id":"CVE-2012-0364","kev":false,"epss":{"score":0.01203,"percentile":0.64796,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"}}],"public_evidence":[{"product":{"name":"Cisco Small Business SRP500 Series Services Ready Platforms","slug":"cisco-small-business-srp500-series-services-ready-platforms","vendor":"Cisco"},"cve":{"id":"CVE-2012-0365"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:56:00Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Small Business SRP500 Series Services Ready Platforms","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.03241,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2012-02-24T00:00:00Z","updated_at":"2012-02-24T00:00:00Z","advisory_updated_at":"2012-02-24T00:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500","row_display_order":1},{"product":{"name":"Cisco Small Business SRP500 Series Services Ready Platforms","slug":"cisco-small-business-srp500-series-services-ready-platforms","vendor":"Cisco"},"cve":{"id":"CVE-2012-0363"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:56:00Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Small Business SRP500 Series Services Ready Platforms","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02198,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2012-02-24T00:00:00Z","updated_at":"2012-02-24T00:00:00Z","advisory_updated_at":"2012-02-24T00:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500","row_display_order":2},{"product":{"name":"Cisco Small Business SRP500 Series Services Ready Platforms","slug":"cisco-small-business-srp500-series-services-ready-platforms","vendor":"Cisco"},"cve":{"id":"CVE-2012-0364"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:56:00Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Small Business SRP500 Series Services Ready Platforms","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01203,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2012-02-24T00:00:00Z","updated_at":"2012-02-24T00:00:00Z","advisory_updated_at":"2012-02-24T00:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120223-srp500","row_display_order":3}]}