RCE in Cisco Telepresence_manager
CVE-2012-2486
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording S…
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.017 (75.3th percentile) — read the EPSS interpretation.
Affected products
- Cisco Telepresence_manager — versions 1.1.0.0, 1.1.0.0\(209\), 1.2.0.0
- Cisco Telepresence_multipoint_switch
- Cisco Telepresence_multipoint_switch_software — versions 1.0.4.0, 1.0.4.0\(21\), 1.1.0
- Cisco Telepresence_recording_server — versions 1.6.1\(2\), 1.6.2\(31\), 1.6.3\(4\)
- Cisco Telepresence_system_1300_65
- Cisco Telepresence_system_3000
- Cisco Telepresence_system_3010
- Cisco Telepresence_system_3200
- Cisco Telepresence_system_3210
- Cisco Telepresence_system_software — versions 1.2.3\(1101\), 1.3.2\(1393\), 1.4.7\(2229\)
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)