CVE-2016-9208

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-12-14 · updated 2026-06-17
Weakness: CWE-22

Description

A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emergency Responder could allow an authenticated, remote attacker to access files in arbitrary locations on the file system of an affected device. More Information: CSCva98951 CSCva98954 CSCvb57494. Known Affected Releases: 11.5(2.10000.5). Known Fixed Releases: 12.0(0.98000.14) 12.0(0.98000.16).

Affected products

Cisco Emergency Responder: 11.5(2.10000.5)

References

http://www.securityfocus.com/bid/94800
http://www.securitytracker.com/id/1037426
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-cer1
http://www.securityfocus.com/bid/94800
http://www.securitytracker.com/id/1037426
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-cer1

Get alerted when CVE-2016-9208 or the next vulnerability affects your stack