A huge collection of 3400+ free website templates JAR theme com WP themes and more at the biggest community-driven free web design site
Home / security-advisories / Cisco Emergency Responder Static Credentials Vulnerability (CVE-2023-20101)

Cisco Emergency Responder Static Credentials Vulnerability (CVE-2023-20101)

Advisory No: TZCERT/SA/2023/10/5

Date of First Release: 5th October 2023

Source: CISCO

Software Affected:  Cisco Emergency Responder


A vulnerability affecting Cisco Emergency Responder has been disclosed. This vulnerability may lead to arbitrary code execution in the context of privileged user.


Cisco Emergency Responder has the static user credentials for the root account that is reserved for use during development. This default account with static credentials that cannot be changed or deleted is vulnerable. It allows the attacker to log in to the affected system and execute arbitrary commands as root user.


Successful exploitation of this vulnerability may allow the attacker to take control of affected system.


Cisco has released a patch for this vulnerability. Users and administrators are encouraged to apply all necessary updates.


  1. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cer-priv-esc-B9t3hqk9

Check Also

Remote Code Execution Vulnerabilities in IBM Operational Decision Manager, and IBM i Modernization Engine for Lifecycle Integration (CVE-2019-19919, CVE-2019-12384)

Advisory No: TZCERT/SA/2024/05/17-6 Date of First Release: 17th May 2024 Source: IBM Software Affected: IBM …