PT-2012-3200 · Cisco · Cisco Emergency Responder

Published 2012-08-06 · Updated 2012-08-07 · CVE-2012-1346

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder versions 8.6 through 9.2

Description The issue allows remote attackers to cause a denial of service by consuming CPU resources. This is achieved by sending malformed UDP packets to the CERPT port.

Recommendations For Cisco Emergency Responder versions 8.6 through 9.2, consider restricting access to the CERPT port to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2012-1346

Affected Products

Cisco Emergency Responder

References · 2

• https://cisco.com/en/US/docs/voice_ip_comm/cer/8_7/english/release/notes/CER0_BK_CEE780BD_00_cisco-emergency-responder-87-release_chapter_00.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-1346 · Security Note