What is CVE-2023-20101?

CVE-2023-20101 is a critical-severity vulnerability in Cisco Emergency Responder, classified under Use of Hard-coded Credentials. CVSS score: 9.8/10. Published 2023-10-04.

How severe is CVE-2023-20101?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Cisco Emergency Responder

CVE-2023-20101

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has default, static credentials that cannot be changed or deleted. This vulnerabi…

EPSS: 0.007 (72.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cisco Emergency Responder — versions 12.5(1)SU4

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

cisco-sa-cer-priv-esc-B9t3hqk9

Frequently asked questions

What is CVE-2023-20101?: CVE-2023-20101 is a critical-severity vulnerability in Cisco Emergency Responder, classified under Use of Hard-coded Credentials. CVSS score: 9.8/10. Published 2023-10-04.
How severe is CVE-2023-20101?: Critical severity. CVSS v3 base score is 9.8 out of 10.