NetSight
IP …
high8.3

CVE-2012-2486

The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.…

Impact

The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute arbitrary code by leveraging certain adjacency and sending a malformed CDP packet, aka Bug IDs CSCtz40953, CSCtz40947, CSCtz40965, and CSCtz40953.

Affected products

VendorProductAffected versions
CiscoTelepresence Multipoint Switch Software
through 1.8.3\(9\)
Versions 1.0.4.0, 1.0.4.0\(21\), 1.1.0, 1.1.0\(254\), 1.1.1
CiscoTelepresence Multipoint Switch
All versions
CiscoTelepresence System Software
through 1.9.0.1\(3\)
Versions 1.2.3\(1101\), 1.3.2\(1393\), 1.4.7\(2229\), 1.5.1\(2082\), 1.5.3\(2115\)
CiscoTelepresence System 1300 65
All versions
CiscoTelepresence System 3000
All versions
CiscoTelepresence System 3010
All versions
CiscoTelepresence System 3200
All versions
CiscoTelepresence System 3210
All versions
CiscoTelepresence System T3
All versions
CiscoTelepresence System Tx1300 47
All versions
CiscoTelepresence System Tx1310 65
All versions
CiscoTelepresence System Tx9000
All versions

Weakness classification

CWE-94

References