Unscored severity · published Jan 17, 2013
CVE-2012-5444
Cisco TelePresence Video Communication Server (VCS) X7.0.3 does not properly process certain search rules, which allows remote attackers to create conferences via an unspecified…
–
CVSS
1%
EPSS
No
On KEV
Description
Cisco TelePresence Video Communication Server (VCS) X7.0.3 does not properly process certain search rules, which allows remote attackers to create conferences via an unspecified Conductor request, aka Bug ID CSCub67989.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TV
Telepresence Video Communication Servers Software · Cisco
x7.0.3 · source: NVD
Affected product
TV
Telepresence Video Communication Servers Software
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5444
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5444
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-5444
More from Telepresence Video Communication Servers Software
–
CVE-2014-0662
The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (process failure) via a crafted SDP message,…
–
CVE-2011-3294
Cross-site scripting (XSS) vulnerability in the login page in the administrative interface on Cisco TelePresence Video Communication Servers (VCS) with software before X7.0 allows…