Login Request a demo
Unscored severity · published Jul 12, 2012
CVE-2012-3073
The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows…
–
CVSS
1.8%
EPSS
No
On KEV
Description
The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to cause a denial of service (networking outage or process crash) via (1) malformed IP packets, (2) a high rate of TCP connection requests, or (3) a high rate of TCP connection terminations, aka Bug IDs CSCti21830, CSCti21851, CSCtj19100, CSCtj19086, CSCtj19078, CSCty11219, CSCty11299, CSCty11323, and CSCty11338.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TM
Telepresence Manager · Cisco
through 1.8.1\(682\); 1.1.0.0; 1.1.0.0(209); 1.2.0.0; 1.2.0.0(200); 1.3.2(466); +13 more · source: NVD
TM
Telepresence Multipoint Switch · Cisco
All versions, or not specified · source: NVD
TM
Telepresence Multipoint Switch Software · Cisco
through 1.8.0\(1026\); 1.0.4.0; 1.0.4.0(21); 1.1.0; 1.1.0(254); 1.1.1; +33 more · source: NVD
TR
Telepresence Recording Server · Cisco
through 1.8.0\(160\); 1.6.1(2); 1.6.2(31); 1.6.3(4); 1.7.0(190); 1.7.1(22); +2 more · source: NVD
TS
Telepresence System 1300 65 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3000 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3010 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3200 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3210 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System Software · Cisco
through 1.9.0.1\(3\); 1.2.3(1101); 1.3.2(1393); 1.4.7(2229); 1.5.1(2082); 1.5.3(2115); +25 more · source: NVD
TS
Telepresence System T3 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System Tx1300 47 · Cisco
All versions, or not specified · source: NVD
Affected product
TM
Telepresence Manager
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3073
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3073
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctms
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctsman
More from Telepresence Manager
–
CVE-2012-2486
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco…
–
CVE-2011-0379
Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x,…
–
CVE-2011-0380
Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to bypass authentication and invoke arbitrary methods via a malformed SOAP request, aka Bug ID CSCtc59562
–
CVE-2011-0381
Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to perform unspecified actions and consequently execute arbitrary code via a crafted request to the Java RMI…