PT-2012-4465 · Cisco · Cisco Telepresence Manager+2

Published 2012-07-12 · Updated 2018-10-30 · CVE-2012-3073

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Multipoint Switch versions prior to 1.8.1 Cisco TelePresence Manager versions prior to 1.9.0 Cisco TelePresence Recording Server version 1.8 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in a networking outage or process crash, via malformed IP packets, a high rate of TCP connection requests, or a high rate of TCP connection terminations.

Recommendations For Cisco TelePresence Multipoint Switch versions prior to 1.8.1, update to version 1.8.1 or later. For Cisco TelePresence Manager versions prior to 1.9.0, update to version 1.9.0 or later. For Cisco TelePresence Recording Server version 1.8 and earlier, update to a version later than 1.8.

Fix

Related Identifiers

CVE-2012-3073

Affected Products

Cisco Telepresence Manager

Cisco Telepresence Multipoint Switch

Cisco Telepresence Recording Server

References · 5

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctsman · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3073 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctms · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3073 · Note