CVE-2016-6468

Опубликовано: 14 дек. 2016

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. More Information: CSCvb06663. Known Affected Releases: 11.5(1.10000.4). Known Fixed Releases: 12.0(0.98000.14).

Ссылки

http://www.securityfocus.com/bid/94786
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037428
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-cer
Vendor Advisory
http://www.securityfocus.com/bid/94786
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037428
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-cer
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cisco:emergency_responder:11.5\(1.10000.4\):*:*:*:*:*:*:*

EPSS

Процентиль: 55%

0.00329

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-r234-5c7f-3prg