PT-2016-7704 · Cisco · Cisco Emergency Responder

Publicado 2016-12-14 · Atualizado 2016-12-22 · CVE-2016-9208

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder version 11.5(2.10000.5)

Description A vulnerability in the File Management Utility, the Download File form, and the Serviceability application could allow an authenticated, remote attacker to access files in arbitrary locations on the file system of an affected device.

Recommendations For Cisco Emergency Responder version 11.5(2.10000.5), update to version 12.0(0.98000.14) or 12.0(0.98000.16) to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2016-9208

Produtos afetados

Cisco Emergency Responder

Referências · 5

• http://securityfocus.com/bid/94800 · Nota
• http://securitytracker.com/id/1037426 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9208 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-cer1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-9208 · Aviso do Fabricante