HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2016-6468

CVSS 8.8v3.0pub. 2016-12-14upd. 2026-05-06

A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. More Information: CSCvb06663. Known Affected Releases: 11.5(1.10000.4). Known Fixed Releases: 12.0(0.98000.14).

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Cisco Emergency Responder

    APP
    Cisco
    11.5\(1.10000.4\)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2023-20101CRITICAL9.8PL ✓same product

Cisco Emergency Responder — statyczne dane logowania konta root

CVE-2017-12337CRITICAL9.8PL ✓same product

Cisco Voice OS – nieautoryzowany dostęp root po upgrade'ie (Auth Bypass)

CVE-2023-20259HIGH8.6same product

A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenti...

CVE-2017-6779HIGH7.5same product

Multiple Cisco products are affected by a vulnerability in local file management for certain system log files ...

CVE-2008-1154HIGH10.0same product

The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unifie...