VulnerabilityModified
CVE-2015-6406
Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.5(1.10000.5) allows remote authenticated users to write to arbitrary files via a crafted filename, aka Bug ID CSCuv21781.
MEDIUM 4.0EPSS 2.31%
Does this matter?
Lower severity and a low EPSS score (2.31%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.5(1.10000.5) allows remote authenticated users to write to arbitrary files via a crafted filename, aka Bug ID CSCuv21781.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
- EPSS
- 2.31% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- cisco/emergency responder
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-ertVendor Advisory
- http://www.securityfocus.com/bid/78816
- http://www.securitytracker.com/id/1034384
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-ertVendor Advisory
- http://www.securityfocus.com/bid/78816
- http://www.securitytracker.com/id/1034384
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.