Skip to main content

Emergency Responder CVE-2015-6406

MEDIUM
Path Traversal (CWE-22)
2015-12-13 psirt@cisco.com
Path Traversal Cisco Emergency Responder
4.0
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
4.0 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:S/C:N/I:P/A:N
Attack Vector
Network
Attack Complexity
Low
Confidentiality
None
Integrity
P
Availability
None

Lifecycle Timeline

1
CVE Published
Dec 13, 2015 - 03:59 cve.org
MEDIUM 4.0

DescriptionCVE.org

Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.5(1.10000.5) allows remote authenticated users to write to arbitrary files via a crafted filename, aka Bug ID CSCuv21781.

AnalysisAI

Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.5(1.10000.5) allows remote authenticated users to write to arbitrary files via a crafted filename, aka Bug ID. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Path Traversal (CWE-22), which allows attackers to access files and directories outside the intended path. Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.5(1.10000.5) allows remote authenticated users to write to arbitrary files via a crafted filename, aka Bug ID CSCuv21781. Affected products include: Cisco Emergency Responder.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate and canonicalize file paths. Use chroot or sandboxing. Reject input containing path separators or '../' sequences.

More in Emergency Responder

View all
CVE-2017-12337 CRITICAL
9.8 Nov 16

A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System softw
CVE-2023-20101 CRITICAL
9.8 Oct 04

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected de
CVE-2016-6468 HIGH
8.8 Dec 14

A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remot
CVE-2024-20352 HIGH
8.8 Apr 03

A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traver
CVE-2023-20259 HIGH
7.5 Oct 04

A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, rem
CVE-2023-20266 HIGH
7.2 Aug 30

A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communica
CVE-2014-2115 MEDIUM
6.8 Apr 04

Multiple cross-site request forgery (CSRF) vulnerabilities in CERUserServlet pages in Cisco Emergency Responder (ER) 8.6
CVE-2015-6405 MEDIUM
6.8 Dec 13

Cross-site request forgery (CSRF) vulnerability in Cisco Emergency Responder 10.5(1) and 10.5(1a) allows remote attacker
CVE-2016-9208 MEDIUM
6.5 Dec 14

A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emer
CVE-2024-20347 MEDIUM
6.5 Apr 03

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, w
CVE-2021-1226 MEDIUM
6.5 Jan 13

A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Man
CVE-2017-12227 MEDIUM
5.4 Sep 07

A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacke

Same weakness CWE-22 – Path Traversal

View all
CVE-2019-3396 CRITICAL POC
9.8
CVE-2019-19781 CRITICAL POC
9.8
CVE-2020-5902 CRITICAL POC
9.8
CVE-2021-40444 HIGH POC
8.8
CVE-2021-27065 HIGH POC
7.8
CVE-2019-11510 CRITICAL POC
10.0
CVE-2018-13379 CRITICAL POC
9.1
CVE-2015-0016 HIGH POC
7.8

Same technique Path Traversal

View all
CVE-2025-64446 CRITICAL POC
9.8
CVE-2015-0016 HIGH POC
7.8
CVE-2016-0752 HIGH POC
7.5
CVE-2024-13159 CRITICAL POC
9.8
CVE-2024-13160 CRITICAL POC
9.8
CVE-2024-13161 CRITICAL POC
9.8
CVE-2014-0780 CRITICAL POC
9.8
CVE-2024-48248 HIGH POC
8.6

Share

CVE-2015-6406 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy