← Back

CVE-2012-3074

nvd nist
Published: Jul 12, 2012Modified: Apr 29, 2026

JSON object

Loading...
8.3
Vector
AV:A/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 6.5 / Impact: 10.0
Source: NVD

Description

An unspecified API on Cisco TelePresence Immersive Endpoint Devices before 1.9.1 allows remote attackers to execute arbitrary commands by leveraging certain adjacency and sending a malformed request on TCP port 61460, aka Bug ID CSCtz38382.

Affected (42)

Cisco
11 products
Telepresence System Software
Telepresence System 1300 65
Telepresence System 3000
Telepresence System 3010
Telepresence System 3200
Telepresence System 3210
Telepresence System T3
Telepresence System Tx1300 47
Telepresence System Tx1310 65
Telepresence System Tx9000
Telepresence System Tx9200
Configuration A
42 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Telepresence System Software
Up to 1.9.0.1\(3\)
Telepresence System Software
Version 1.2.3(1101)
Telepresence System Software
Version 1.3.2(1393)
Telepresence System Software
Version 1.4.7(2229)
Telepresence System Software
Version 1.5.10(3648)
Telepresence System Software
Version 1.5.11(3659)
Telepresence System Software
Version 1.5.12(3701)
Telepresence System Software
Version 1.5.13(3717)
Telepresence System Software
Version 1.5.1(2082)
Telepresence System Software
Version 1.5.3(2115)
Telepresence System Software
Version 1.6.0(3954)
Telepresence System Software
Version 1.6.2(4023)
Telepresence System Software
Version 1.6.3(4042)
Telepresence System Software
Version 1.6.4(4072)
Telepresence System Software
Version 1.6.5(4097)
Telepresence System Software
Version 1.6.6(4109)
Telepresence System Software
Version 1.6.7(4212)
Telepresence System Software
Version 1.6.8(4222)
Telepresence System Software
Version 1.7.0.1(4764)
Telepresence System Software
Version 1.7.0.2(4719)
Telepresence System Software
Version 1.7.1(4864)
Telepresence System Software
Version 1.7.2.1(2)
Telepresence System Software
Version 1.7.2(4937)
Telepresence System Software
Version 1.7.4(270)
Telepresence System Software
Version 1.7.5(42)
Telepresence System Software
Version 1.7.6(4)
Telepresence System Software
Version 1.8.0(55)
Telepresence System Software
Version 1.8.1(34)
Telepresence System Software
Version 1.8.2(11)
Telepresence System Software
Version 1.8.3(4)
Telepresence System Software
Version 1.9.0(46)
Telepresence System 1300 65
All versions
Telepresence System 3000
All versions
Telepresence System 3010
All versions
Telepresence System 3200
All versions
Telepresence System 3210
All versions
Cisco
Telepresence System T3
All versions
Telepresence System T3
All versions
Telepresence System Tx1300 47
All versions
Telepresence System Tx1310 65
All versions
Telepresence System Tx9000
All versions
Telepresence System Tx9200
All versions

Related CWEs

CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (2)

Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.