CVE-2024-20352
CVSS 3.1 Score 4.9 of 10 (medium)
Details
Summary
CVE-2024-20352 is a vulnerability affecting the web UI of Cisco Emergency Responder. An authenticated, remote attacker can exploit this vulnerability by conducting a directory traversal attack. This weakness stems from insufficient protections in the web UI, which could allow the attacker to access sensitive files, upload malicious content, or delete existing files on the affected device. Successful exploitation grants the attacker the privilege level of the affected user, potentially enabling them to perform arbitrary actions, such as accessing password or log files.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions