NetSight
high7.8

CVE-2012-3073

The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.…

Impact

The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to cause a denial of service (networking outage or process crash) via (1) malformed IP packets, (2) a high rate of TCP connection requests, or (3) a high rate of TCP connection terminations, aka Bug IDs CSCti21830, CSCti21851, CSCtj19100, CSCtj19086, CSCtj19078, CSCty11219, CSCty11299, CSCty11323, and CSCty11338.

Affected products

VendorProductAffected versions
CiscoTelepresence Multipoint Switch Software
through 1.8.0\(1026\)
Versions 1.0.4.0, 1.0.4.0\(21\), 1.1.0, 1.1.0\(254\), 1.1.1
CiscoTelepresence Multipoint Switch
All versions
CiscoTelepresence System Software
through 1.9.0.1\(3\)
Versions 1.2.3\(1101\), 1.3.2\(1393\), 1.4.7\(2229\), 1.5.1\(2082\), 1.5.3\(2115\)
CiscoTelepresence System 1300 65
All versions
CiscoTelepresence System 3000
All versions
CiscoTelepresence System 3010
All versions
CiscoTelepresence System 3200
All versions
CiscoTelepresence System 3210
All versions
CiscoTelepresence System T3
All versions
CiscoTelepresence System Tx1300 47
All versions
CiscoTelepresence System Tx1310 65
All versions
CiscoTelepresence System Tx9000
All versions

References