Cisco Emergency Responder vulnerabilities

25 known vulnerabilities affecting cisco/emergency_responder.

Total CVEs
25
CISA KEV
1
actively exploited
Public exploits
2
Exploited in wild
1
Severity breakdown
CRITICAL4HIGH5MEDIUM16

Vulnerabilities

Page 2 of 2
CVE-2012-1346MEDIUMCVSS 5.0v8.6v9.22012-08-06
CVE-2012-1346 [MEDIUM] CWE-399 CVE-2012-1346: Cisco Emergency Responder 8.6 and 9.2 allows remote attackers to cause a denial of service (CPU cons Cisco Emergency Responder 8.6 and 9.2 allows remote attackers to cause a denial of service (CPU consumption) by sending malformed UDP packets to the CERPT port, aka Bug ID CSCtx38369.
nvd
CVE-2008-1154CRITICALCVSS 10.0v2.02008-04-04
CVE-2008-1154 [CRITICAL] CWE-287 CVE-2008-1154: The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, includ The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communications Manager (CUCM) 5.x and 6.x, Unified Presence 1.x and 6.x, Emergency Responder 2.x, and Mobility Manager 2.x, does not require authentication for requests received from the network, which allows remote attackers to execute ar
nvd
CVE-2005-0356MEDIUMCVSS 5.0PoCv1.12005-05-31
CVE-2005-0356 [MEDIUM] CVE-2005-0356: Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timest Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
nvd
CVE-2004-1760CRITICALCVSS 10.0v1.12004-01-21
CVE-2004-1760 [CRITICAL] CWE-287 CVE-2004-1760: The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.
nvd
CVE-2004-1759MEDIUMCVSS 5.0v1.12004-01-21
CVE-2004-1759 [MEDIUM] CWE-399 CVE-2004-1759: Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated using port scanning.
nvd