CVE-2012-0364: Cisco SRP 520 series devices with firmware before 1.1.26 and SRP 520W-U and 540 series devices with firmwar...

Security readout for executives and security teams

This issue affects older Cisco Small Business SRP 500 routers. A remote attacker could replace the device configuration file through an upload request, potentially changing how the gateway routes, authenticates, or exposes services. The provided sources do not report active exploitation. Exposure is most likely in organizations still running legacy Cisco SRP 500 series devices, especially where administrative services are reachable from untrusted networks. Current affected product metadata in the CVE bundle is incomplete. Prioritize remediation where these devices sit at network edges or remote offices. Configuration replacement on a gateway can create business disruption and security exposure, even though the sources do not confirm active exploitation. Mitigation focus: Upgrade SRP 520 firmware to 1.1.26 or later.; Upgrade SRP 520W-U and SRP 540 firmware to 1.2.4 or later.; Restrict device management access to trusted administrative networks..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.