Login Request a demo
Unscored severity · published Jul 12, 2012
CVE-2012-2486
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco…
–
CVSS
1.7%
EPSS
No
On KEV
Description
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute arbitrary code by leveraging certain adjacency and sending a malformed CDP packet, aka Bug IDs CSCtz40953, CSCtz40947, CSCtz40965, and CSCtz40953.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TM
Telepresence Manager · Cisco
through 1.8.1\(682\); 1.1.0.0; 1.1.0.0(209); 1.2.0.0; 1.2.0.0(200); 1.3.2(466); +13 more · source: NVD
TM
Telepresence Multipoint Switch · Cisco
All versions, or not specified · source: NVD
TM
Telepresence Multipoint Switch Software · Cisco
through 1.8.3\(9\); 1.0.4.0; 1.0.4.0(21); 1.1.0; 1.1.0(254); 1.1.1; +34 more · source: NVD
TR
Telepresence Recording Server · Cisco
through 1.8.0\(160\); 1.6.1(2); 1.6.2(31); 1.6.3(4); 1.7.0(190); 1.7.1(22); +2 more · source: NVD
TS
Telepresence System 1300 65 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3000 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3010 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3200 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3210 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System Software · Cisco
through 1.9.0.1\(3\); 1.2.3(1101); 1.3.2(1393); 1.4.7(2229); 1.5.1(2082); 1.5.3(2115); +26 more · source: NVD
TS
Telepresence System T3 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System Tx1300 47 · Cisco
All versions, or not specified · source: NVD
Affected product
TM
Telepresence Manager
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2486
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2486
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctms
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctsman
More from Telepresence Manager
–
CVE-2012-3073
The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows…
–
CVE-2011-0379
Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x,…
–
CVE-2011-0380
Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to bypass authentication and invoke arbitrary methods via a malformed SOAP request, aka Bug ID CSCtc59562
–
CVE-2011-0381
Cisco TelePresence Manager 1.2.x through 1.6.x allows remote attackers to perform unspecified actions and consequently execute arbitrary code via a crafted request to the Java RMI…