CVE-2024-20347

Summary

CVE-2024-20347 is a vulnerability affecting Cisco Emergency Responder. It allows unauthenticated, remote attackers to execute Cross-Site Request Forgery (CSRF) attacks, which can lead to arbitrary actions on an affected device. The vulnerability stems from insufficient protections for the web UI, leaving the system open to manipulation. An attacker can trick a user into clicking a malicious link, resulting in potentially harmful actions such as user deletion, with the privilege level of the affected user.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.