← Back

CVE-2012-2486

nvd nist
Published: Jul 12, 2012Modified: Apr 29, 2026

JSON object

Loading...
8.3
Vector
AV:A/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 6.5 / Impact: 10.0
Source: NVD

Description

The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute arbitrary code by leveraging certain adjacency and sending a malformed CDP packet, aka Bug IDs CSCtz40953, CSCtz40947, CSCtz40965, and CSCtz40953.

Affected (114)

Cisco
15 products
Telepresence Multipoint Switch Software
Telepresence Multipoint Switch
Telepresence System Software
Telepresence System 1300 65
Telepresence System 3000
Telepresence System 3010
Telepresence System 3200
Telepresence System 3210
Telepresence System T3
Telepresence System Tx1300 47
Telepresence System Tx1310 65
Telepresence System Tx9000
Telepresence System Tx9200
Telepresence Manager
Telepresence Recording Server
Configuration A
44 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Telepresence Multipoint Switch Software
Up to 1.8.3\(9\)
Telepresence Multipoint Switch Software
Version 1.0.4.0
Telepresence Multipoint Switch Software
Version 1.0.4.0(21)
Telepresence Multipoint Switch Software
Version 1.1.0
Telepresence Multipoint Switch Software
Version 1.1.0(254)
Telepresence Multipoint Switch Software
Version 1.1.1
Telepresence Multipoint Switch Software
Version 1.1.1(30)
Telepresence Multipoint Switch Software
Version 1.1.2
Telepresence Multipoint Switch Software
Version 1.1.2(6)
Telepresence Multipoint Switch Software
Version 1.5.0
Telepresence Multipoint Switch Software
Version 1.5.0(222)
Telepresence Multipoint Switch Software
Version 1.5.1
Telepresence Multipoint Switch Software
Version 1.5.1(2)
Telepresence Multipoint Switch Software
Version 1.5.2
Telepresence Multipoint Switch Software
Version 1.5.2(21)
Telepresence Multipoint Switch Software
Version 1.5.3.12
Telepresence Multipoint Switch Software
Version 1.5.3
Telepresence Multipoint Switch Software
Version 1.5.4
Telepresence Multipoint Switch Software
Version 1.5.4(4)
Telepresence Multipoint Switch Software
Version 1.5.5
Telepresence Multipoint Switch Software
Version 1.5.5(1)
Telepresence Multipoint Switch Software
Version 1.5.6
Telepresence Multipoint Switch Software
Version 1.5.6(1)
Telepresence Multipoint Switch Software
Version 1.6.0
Telepresence Multipoint Switch Software
Version 1.6.0(108)
Telepresence Multipoint Switch Software
Version 1.6.1
Telepresence Multipoint Switch Software
Version 1.6.1(2)
Telepresence Multipoint Switch Software
Version 1.6.2
Telepresence Multipoint Switch Software
Version 1.6.2(3)
Telepresence Multipoint Switch Software
Version 1.6.3
Telepresence Multipoint Switch Software
Version 1.6.3(2)
Telepresence Multipoint Switch Software
Version 1.6.4
Telepresence Multipoint Switch Software
Version 1.6.4(3)
Telepresence Multipoint Switch Software
Version 1.7.0.1(5)
Telepresence Multipoint Switch Software
Version 1.7.0
Telepresence Multipoint Switch Software
Version 1.7.1(15)
Telepresence Multipoint Switch Software
Version 1.7.2(75)
Telepresence Multipoint Switch Software
Version 1.7.3(2)
Telepresence Multipoint Switch Software
Version 1.8.0
Telepresence Multipoint Switch Software
Version 1.8.0(1026)
Telepresence Multipoint Switch Software
Version 1.8.1(1041)
Telepresence Multipoint Switch Software
Version 1.8.2
Telepresence Multipoint Switch Software
Version 1.8.2(2)
Telepresence Multipoint Switch
All versions
Configuration B
43 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Telepresence System Software
Up to 1.9.0.1\(3\)
Telepresence System Software
Version 1.2.3(1101)
Telepresence System Software
Version 1.3.2(1393)
Telepresence System Software
Version 1.4.7(2229)
Telepresence System Software
Version 1.5.10(3648)
Telepresence System Software
Version 1.5.11(3659)
Telepresence System Software
Version 1.5.12(3701)
Telepresence System Software
Version 1.5.13(3717)
Telepresence System Software
Version 1.5.1(2082)
Telepresence System Software
Version 1.5.3(2115)
Telepresence System Software
Version 1.6.0(3954)
Telepresence System Software
Version 1.6.2(4023)
Telepresence System Software
Version 1.6.3(4042)
Telepresence System Software
Version 1.6.4(4072)
Telepresence System Software
Version 1.6.5(4097)
Telepresence System Software
Version 1.6.6(4109)
Telepresence System Software
Version 1.6.7(4212)
Telepresence System Software
Version 1.6.8(4222)
Telepresence System Software
Version 1.7.0.1(4764)
Telepresence System Software
Version 1.7.0.2(4719)
Telepresence System Software
Version 1.7.1(4864)
Telepresence System Software
Version 1.7.2.1(2)
Telepresence System Software
Version 1.7.2(4937)
Telepresence System Software
Version 1.7.4(270)
Telepresence System Software
Version 1.7.5(42)
Telepresence System Software
Version 1.7.6(4)
Telepresence System Software
Version 1.8.0(55)
Telepresence System Software
Version 1.8.1(34)
Telepresence System Software
Version 1.8.2(11)
Telepresence System Software
Version 1.8.3(4)
Telepresence System Software
Version 1.9.0(46)
Telepresence System Software
Version 4.0.0
Telepresence System 1300 65
All versions
Telepresence System 3000
All versions
Telepresence System 3010
All versions
Telepresence System 3200
All versions
Telepresence System 3210
All versions
Cisco
Telepresence System T3
All versions
Telepresence System T3
All versions
Telepresence System Tx1300 47
All versions
Telepresence System Tx1310 65
All versions
Telepresence System Tx9000
All versions
Telepresence System Tx9200
All versions
Configuration C
19 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Telepresence Manager
Up to 1.8.1\(682\)
Telepresence Manager
Version 1.1.0.0
Telepresence Manager
Version 1.1.0.0(209)
Telepresence Manager
Version 1.2.0.0
Telepresence Manager
Version 1.2.0.0(200)
Telepresence Manager
Version 1.3.2(466)
Telepresence Manager
Version 1.4.0(279)
Telepresence Manager
Version 1.5.1(420)
Telepresence Manager
Version 1.5.2(423)
Telepresence Manager
Version 1.6.0(220)
Telepresence Manager
Version 1.6.2(64)
Telepresence Manager
Version 1.6.3(113)
Telepresence Manager
Version 1.6.5(167)
Telepresence Manager
Version 1.7.1(732)
Telepresence Manager
Version 1.7.2(256)
Telepresence Manager
Version 1.7.3.1
Telepresence Manager
Version 1.7.4
Telepresence Manager
Version 1.7.5(62)
Telepresence Manager
Version 1.8.0(582)
Configuration D
8 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Telepresence Recording Server
Up to 1.8.0\(160\)
Telepresence Recording Server
Version 1.6.1(2)
Telepresence Recording Server
Version 1.6.2(31)
Telepresence Recording Server
Version 1.6.3(4)
Telepresence Recording Server
Version 1.7.0(190)
Telepresence Recording Server
Version 1.7.1(22)
Telepresence Recording Server
Version 1.7.2.1
Telepresence Recording Server
Version 1.7.3(3)

Related CWEs

CWE-94
Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (8)

Source: psirt@cisco.com
Vendor Advisory
Source: psirt@cisco.com
Vendor Advisory
Source: psirt@cisco.com
Vendor Advisory
Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.