CVE-2015-6406: Cisco Emergency Responder

Medium severity, CVSS 4.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.5(1.10000.5) allows remote authenticated users to write to arbitrary files via a crafted filename, aka Bug ID CSCuv21781.

Affected products

• Cisco Emergency Responder: version 10.5(1.10000.5) only

Published 2015-12-13. Last modified 2026-06-17.