PT-2015-7232
CVE-2015-6407
·
تاريخ النشر
2015-12-13
·
تاريخ التحديث
2016-12-07
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Cisco Emergency Responder version 10.5(3.10000.9)
Description
The issue allows remote attackers to upload files to arbitrary locations via a crafted parameter.
Recommendations
For Cisco Emergency Responder version 10.5(3.10000.9), consider restricting access to the vulnerable parameter to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾