Login Request a demo
Unscored severity · published Jul 12, 2012
CVE-2012-3074
An unspecified API on Cisco TelePresence Immersive Endpoint Devices before 1.9.1 allows remote attackers to execute arbitrary commands by leveraging certain adjacency and sending…
–
CVSS
1.2%
EPSS
No
On KEV
Description
An unspecified API on Cisco TelePresence Immersive Endpoint Devices before 1.9.1 allows remote attackers to execute arbitrary commands by leveraging certain adjacency and sending a malformed request on TCP port 61460, aka Bug ID CSCtz38382.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
Telepresence System 1300 65 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3000 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3010 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3200 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3210 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System Software · Cisco
through 1.9.0.1\(3\); 1.2.3(1101); 1.3.2(1393); 1.4.7(2229); 1.5.1(2082); 1.5.3(2115); +25 more · source: NVD
TS
Telepresence System T3 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System Tx1300 47 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System Tx1310 65 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System Tx9000 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System Tx9200 · Cisco
All versions, or not specified · source: NVD
Affected product
TS
Telepresence System 1300 65
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3074
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3074
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts
More from Telepresence System 1300 65
–
CVE-2014-0661
The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before…
–
CVE-2013-3454
Cisco TelePresence System Software 1.10.1 and earlier on 500, 13X0, 1X00, 30X0, and 3X00 devices, and 6.0.3 and earlier on TX 9X00 devices, has a default password for the…
–
CVE-2012-3075
The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authenticated users to execute arbitrary commands via a malformed…
–
CVE-2012-3073
The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows…
–
CVE-2012-2486
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco…