CVE-2016-6468

published 2016-12-14

CVE-2016-6468: A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a cross-site…

high 8.8 CVSS 3.0

AV N AC L PR N UI R S U C H I H A H

A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. More Information: CSCvb06663. Known Affected Releases: 11.5(1.10000.4). Known Fixed Releases: 12.0(0.98000.14).

Affected

2 ranges

Vendor	Product	Version range	Fixed in
cisco	emergency_responder	—	—
cisco	emergency_responder	—	—

CWE-352