CVE-2016-9208

Опубликовано: 14 дек. 2016

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emergency Responder could allow an authenticated, remote attacker to access files in arbitrary locations on the file system of an affected device. More Information: CSCva98951 CSCva98954 CSCvb57494. Known Affected Releases: 11.5(2.10000.5). Known Fixed Releases: 12.0(0.98000.14) 12.0(0.98000.16).

Ссылки

http://www.securityfocus.com/bid/94800
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037426
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-cer1
Vendor Advisory
http://www.securityfocus.com/bid/94800
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037426
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-cer1
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cisco:emergency_responder:11.5\(2.10000.5\):*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01007

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-552p-g3pp-2xvh