CVE-2011-4005
Cross-site request forgery (CSRF) vulnerability in the Services Ready Platform Configuration Utility web interface on the Cisco Small Business SRP521W, SRP526W, and SRP527W with firmware before 1.1.24 and the Small Business SRP541W, SRP546W, and SRP547W with firmware before 1.2.1 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary commands, aka Bug ID CSCtr45124.
Key facts
- CVSS score
- 9.3 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:N/AC:M/Au:N/C:C/I:C/A:C- Weakness (CWE)
- CWE-352
- EPSS score
- 1.8% (79th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2011-3958)
- Published
- November 3, 2011
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2011-3958 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.
View on the EU Vulnerability DatabaseAffected products
- cisco / small business srp520 series firmware
- cisco / small business srp520 series firmware
- cisco / small business srp520 series firmware
- cisco / small business srp520 series firmware
- cisco / small business srp521w
- cisco / small business srp526w
- cisco / small business srp527w
- cisco / small business srp540 series firmware
- cisco / small business srp540 series firmware
- cisco / small business srp541w
- cisco / small business srp546w
- cisco / small business srp547w
References
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain