Lucene search

K
cveCiscoCVE-2014-2117
HistoryApr 04, 2014 - 3:10 p.m.

CVE-2014-2117

2014-04-0415:10:37
CWE-20
cisco
web.nvd.nist.gov
24
cve-2014-2117
cisco emergency responder
open redirect
remote attackers
phishing
bug id cscun37909
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

69.4%

Multiple open redirect vulnerabilities in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters, aka Bug ID CSCun37909.

Affected configurations

Nvd
Node
ciscoemergency_responderRange8.6
VendorProductVersionCPE
ciscoemergency_responder*cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

69.4%

Related for CVE-2014-2117