CVE-2024-20347 Cross-site request forgery in Cisco Emergency Responder
Unauthenticated remote attackers can perform arbitrary actions via CSRF by tricking users into clicking crafted links, requiring Cisco Emergency Responder patches.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-20347?
CVE-2024-20347 is a medium-severity vulnerability in Cisco Emergency Responder, published on 3 Apr 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, which could allow the attacker to perform arbitrary actions on an affected device. This vulnerability is due to insufficient protections for the web UI of an affected system. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user, such as deleting users from the device.
Weakness: CWE-352
Which versions are affected by CVE-2024-20347?
It affects 1 product.
Products include Cisco Emergency Responder.
How do I fix CVE-2024-20347?
No fix has been published for CVE-2024-20347 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-20347 being exploited?
There is no known exploitation of CVE-2024-20347 in the wild and no public exploit code.
Other vulnerabilities in Cisco Emergency Responder
Sources
Also known as GHSA-2vqq-3rpw-85f7.