PT-2016-7704 · Cisco · Cisco Emergency Responder

Published 2016-12-14 · Updated 2016-12-22 · CVE-2016-9208

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder version 11.5(2.10000.5)

Description A vulnerability in the File Management Utility, the Download File form, and the Serviceability application could allow an authenticated, remote attacker to access files in arbitrary locations on the file system of an affected device.

Recommendations For Cisco Emergency Responder version 11.5(2.10000.5), update to version 12.0(0.98000.14) or 12.0(0.98000.16) to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2016-9208

Affected Products

Cisco Emergency Responder

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-9208 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-cer1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-9208 · Vendor Advisory
• http://securityfocus.com/bid/94800 · Note
• http://securitytracker.com/id/1037426 · Note