The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute arbitrary code by leveraging certain adjacency and sending a malformed CDP packet, aka Bug IDs CSCtz40953, CSCtz40947, CSCtz40965, and CSCtz40953.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Adjacent Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.01028.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Cisco
  • Telepresence Manager
  • Telepresence Multipoint Switch
  • Telepresence Multipoint Switch Software
  • Telepresence Recording Server
  • Telepresence System 1300 65
  • Telepresence System 3000
  • Telepresence System 3010
  • Telepresence System 3200
  • Telepresence System 3210
  • Telepresence System Software
  • Telepresence System T3
  • Telepresence System Tx1300 47
  • Telepresence System Tx1310 65
  • Telepresence System Tx9000
  • Telepresence System Tx9200

Configuration 1 [-]

AND
OR cpe:2.3:a:cisco:telepresence_multipoint_switch_software:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.0.4.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.0.4.0\(21\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.1.0\(254\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.1.1\(30\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.1.2\(6\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.0\(222\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.1\(2\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.2\(21\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.3.12:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.4\(4\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.5\(1\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.6:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.5.6\(1\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.6.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.6.0\(108\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.6.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.6.1\(2\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.6.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.6.2\(3\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.6.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.6.3\(2\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.6.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.6.4\(3\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.7.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.7.0.1\(5\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.7.1\(15\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.7.2\(75\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.7.3\(2\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.8.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.8.0\(1026\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.8.1\(1041\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.8.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:1.8.2\(2\):*:*:*:*:*:*:*
cpe:2.3:h:cisco:telepresence_multipoint_switch:*:*:*:*:*:*:*:*

Configuration 2 [-]

AND
OR cpe:2.3:a:cisco:telepresence_system_software:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.2.3\(1101\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.3.2\(1393\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.4.7\(2229\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.5.1\(2082\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.5.3\(2115\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.5.10\(3648\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.5.11\(3659\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.5.12\(3701\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.5.13\(3717\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.6.0\(3954\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.6.2\(4023\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.6.3\(4042\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.6.4\(4072\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.6.5\(4097\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.6.6\(4109\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.6.7\(4212\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.6.8\(4222\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.7.0.1\(4764\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.7.0.2\(4719\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.7.1\(4864\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.7.2\(4937\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.7.2.1\(2\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.7.4\(270\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.7.5\(42\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.7.6\(4\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.8.0\(55\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.8.1\(34\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.8.2\(11\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.8.3\(4\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:1.9.0\(46\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_system_software:4.0.0:*:*:*:*:*:*:*
OR cpe:2.3:h:cisco:telepresence_system_1300_65:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:telepresence_system_3000:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:telepresence_system_3010:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:telepresence_system_3200:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:telepresence_system_3210:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:telepresence_system_t3:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:telepresence_system_t3:*:*:custom:*:*:*:*:*
cpe:2.3:h:cisco:telepresence_system_tx1300_47:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:telepresence_system_tx1310_65:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:telepresence_system_tx9000:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:telepresence_system_tx9200:*:*:*:*:*:*:*:*

Configuration 3 [-]

OR cpe:2.3:a:cisco:telepresence_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.1.0.0\(209\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.2.0.0\(200\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.3.2\(466\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.4.0\(279\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.5.1\(420\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.5.2\(423\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.6.0\(220\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.6.2\(64\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.6.3\(113\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.6.5\(167\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.7.1\(732\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.7.2\(256\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.7.3.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.7.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.7.5\(62\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_manager:1.8.0\(582\):*:*:*:*:*:*:*

Configuration 4 [-]

OR cpe:2.3:a:cisco:telepresence_recording_server:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_recording_server:1.6.1\(2\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_recording_server:1.6.2\(31\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_recording_server:1.6.3\(4\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_recording_server:1.7.0\(190\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_recording_server:1.7.1\(22\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_recording_server:1.7.2.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_recording_server:1.7.3\(3\):*:*:*:*:*:*:*

No data.

No data.

Advisories
Source ID Title
EUVD EUVD EUVD-2012-2472 The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute arbitrary code by leveraging certain adjacency and sending a malformed CDP packet, aka Bug IDs CSCtz40953, CSCtz40947, CSCtz40965, and CSCtz40953.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctms cve-icon cve-icon
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs cve-icon cve-icon
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts cve-icon cve-icon
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctsman cve-icon cve-icon
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2024-09-17T04:25:44.077Z

Reserved: 2012-05-07T00:00:00Z

Link: CVE-2012-2486

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2012-07-12T10:34:42.257

Modified: 2025-04-11T00:51:21.963

Link: CVE-2012-2486

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.