CVE-2024-20352

Summary

CVE-2024-20352 is a vulnerability affecting the web UI of Cisco Emergency Responder. An authenticated, remote attacker can exploit this vulnerability by conducting a directory traversal attack. This weakness stems from insufficient protections in the web UI, which could allow the attacker to access sensitive files, upload malicious content, or delete existing files on the affected device. Successful exploitation grants the attacker the privilege level of the affected user, potentially enabling them to perform arbitrary actions, such as accessing password or log files.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.