How severe is CVE-2024-20347?

CVE-2024-20347 has a CVSS 3.x base score of 4.3, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is none, integrity low, and availability none.

Is CVE-2024-20347 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (14th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2024-20347?

CVE-2024-20347 primarily affects Cisco Emergency Responder. In total, 6 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2024-20347?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2024-20347 have an EU (EUVD) identifier?

Yes. CVE-2024-20347 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-18062.

When was CVE-2024-20347 published?

CVE-2024-20347 was published on 2024-04-03 and last updated on 2026-06-17.

CVE-2024-20347

CVE-2024-20347 is a medium-severity vulnerability in Cisco Emergency Responder with a CVSS 3.x base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-352.

Key facts

Severity: Medium (CVSS 3.x base score 4.3)
EPSS exploit prediction: 0% (14th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2024-18062
Weakness: CWE-352
Affected product: Cisco Emergency Responder
Published: 2024-04-03
Last modified: 2026-06-17

Description

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, which could allow the attacker to perform arbitrary actions on an affected device. This vulnerability is due to insufficient protections for the web UI of an affected system. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user, such as deleting users from the device.

Frequently asked questions

What is CVE-2024-20347?: A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, which could allow the attacker to perform arbitrary actions on an affected device. This vulnerability is due to insufficient protections for the web UI of an affected system. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user, such as deleting users from the device.
How severe is CVE-2024-20347?: CVE-2024-20347 has a CVSS 3.x base score of 4.3, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is none, integrity low, and availability none.
Is CVE-2024-20347 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (14th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2024-20347?: CVE-2024-20347 primarily affects Cisco Emergency Responder. In total, 6 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2024-20347?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2024-20347 have an EU (EUVD) identifier?: Yes. CVE-2024-20347 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-18062.
When was CVE-2024-20347 published?: CVE-2024-20347 was published on 2024-04-03 and last updated on 2026-06-17.

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cem-csrf-suCmNjFr

Affected products (6)

cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:emergency_responder:14:*:*:*:*:*:*:*
cpe:2.3:a:cisco:emergency_responder:14su1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:emergency_responder:14su2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:emergency_responder:14su3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:emergency_responder:14su3a:*:*:*:*:*:*:*

More vulnerabilities in Cisco Emergency Responder

CVE-2021-44228 — Critical (CVSS 10.0): Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in…
CVE-2008-1154 — Critical (CVSS 10.0): The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified…
CVE-2004-1760 — Critical (CVSS 10.0): The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS…
CVE-2023-20101 — Critical (CVSS 9.8): A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected…
CVE-2017-12337 — Critical (CVSS 9.8): A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System…
CVE-2016-6468 — High (CVSS 8.8): A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated,…

All CVEs affecting Cisco Emergency Responder →

Other CWE-352 (Cross-Site Request Forgery (CSRF)) vulnerabilities

CVE-2025-32642 — Critical (CVSS 10.0): Cross-Site Request Forgery (CSRF) vulnerability in appsbd Vite Coupon vite-coupon allows Remote Code Inclusion.This…
CVE-2025-23922 — Critical (CVSS 10.0): Cross-Site Request Forgery (CSRF) vulnerability in Harsh iSpring Embedder embed-ispring allows Upload a Web Shell to a…
CVE-2017-5145 — Critical (CVSS 10.0): An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware…
CVE-2019-25729 — Critical (CVSS 9.8): PDF Signer 3.0 contains a server-side template injection vulnerability that allows unauthenticated attackers to execute…
CVE-2025-48340 — Critical (CVSS 9.8): Cross-Site Request Forgery (CSRF) vulnerability in Danny Vink User Profile Meta Manager user-profile-meta allows…
CVE-2025-2907 — Critical (CVSS 9.8): The Order Delivery Date WordPress plugin before 12.3.1 does not have authorization and CSRF checks when importing…

Browse all CWE-352 (Cross-Site Request Forgery (CSRF)) vulnerabilities →