CVE-2015-6406 Information

Description

Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.5(1.10000.5) allows remote authenticated users to write to arbitrary files via a crafted filename aka Bug ID CSCuv21781.

Reference

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-ert http://www.securityfocus.com/bid/78816 http://www.securitytracker.com/id/1034384