CVE-2015-6407

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder version 10.5(3.10000.9)

Description The issue allows remote attackers to upload files to arbitrary locations via a crafted parameter.

Recommendations For Cisco Emergency Responder version 10.5(3.10000.9), consider restricting access to the vulnerable parameter to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.