Emergency Responder vulnerabilities
4 known vulnerabilities in Emergency Responder from Cisco. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Cisco Emergency Responder: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traversal attack, which could allow the attacker to perform arbitrary actions on an affected device. This vulnerability is due to insufficient pro
- 7.5 High severity
Cisco Emergency Responder: Uncontrolled Resource Consumption
A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the web-based management interface and cause delays with call proce
- 9.8 Critical severity
Cisco Emergency Responder: Use of Hard-coded Credentials
A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has default, static credentials that cannot be changed or deleted. This vulnerability is due to the prese
- 7.2 High severity
Cisco Emergency Responder: Improper Privilege Management
A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an authenticated, remote attacker to eleva