CVE-2012-3073

High

Description

The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to cause a denial of service (networking outage or process crash) via (1) malformed IP packets, (2) a high rate of TCP connection requests, or (3) a high rate of TCP connection terminations, aka Bug IDs CSCti21830, CSCti21851, CSCtj19100, CSCtj19086, CSCtj19078, CSCty11219, CSCty11299, CSCty11323, and CSCty11338.

SeverityHigh
CVSS7.8
Exploit probability—
ProductCisco Telepresence Multipoint Switch Software
PublishedJul 12, 2012
First seenJul 12, 2012

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
cisco telepresence_multipoint_switch_softwarev ≤ 1.8.0\(1026\), 1.0.4.0, 1.0.4.0\(21\), 1.1.0, 1.1.0\(254\), 1.1.1, 1.1.1\(30\), 1.1.2, 1.1.2\(6\), 1.5.0, 1.5.0\(222\), 1.5.1, 1.5.1\(2\), 1.5.2, 1.5.2\(21\), 1.5.3, 1.5.3.12, 1.5.4, 1.5.4\(4\), 1.5.5, 1.5.5\(1\), 1.5.6, 1.5.6\(1\), 1.6.0, 1.6.0\(108\), 1.6.1, 1.6.1\(2\), 1.6.2, 1.6.2\(3\), 1.6.3, 1.6.3\(2\), 1.6.4, 1.6.4\(3\), 1.7.0, 1.7.0.1\(5\), 1.7.1\(15\), 1.7.2\(75\), 1.7.3\(2\), 1.8.0—
cisco telepresence_multipoint_switchNo range specified—
cisco telepresence_system_softwarev ≤ 1.9.0.1\(3\), 1.2.3\(1101\), 1.3.2\(1393\), 1.4.7\(2229\), 1.5.1\(2082\), 1.5.3\(2115\), 1.5.10\(3648\), 1.5.11\(3659\), 1.5.12\(3701\), 1.5.13\(3717\), 1.6.0\(3954\), 1.6.2\(4023\), 1.6.3\(4042\), 1.6.4\(4072\), 1.6.5\(4097\), 1.6.6\(4109\), 1.6.7\(4212\), 1.6.8\(4222\), 1.7.0.1\(4764\), 1.7.0.2\(4719\), 1.7.1\(4864\), 1.7.2\(4937\), 1.7.2.1\(2\), 1.7.4\(270\), 1.7.5\(42\), 1.7.6\(4\), 1.8.0\(55\), 1.8.1\(34\), 1.8.2\(11\), 1.8.3\(4\), 1.9.0\(46\)—
cisco telepresence_system_1300_65No range specified—
cisco telepresence_system_3000No range specified—
cisco telepresence_system_3010No range specified—
cisco telepresence_system_3200No range specified—
cisco telepresence_system_3210No range specified—
cisco telepresence_system_t3No range specified—
cisco telepresence_system_tx1300_47No range specified—
cisco telepresence_system_tx1310_65No range specified—
cisco telepresence_system_tx9000No range specified—
cisco telepresence_system_tx9200No range specified—
cisco telepresence_managerv ≤ 1.8.1\(682\), 1.1.0.0, 1.1.0.0\(209\), 1.2.0.0, 1.2.0.0\(200\), 1.3.2\(466\), 1.4.0\(279\), 1.5.1\(420\), 1.5.2\(423\), 1.6.0\(220\), 1.6.2\(64\), 1.6.3\(113\), 1.6.5\(167\), 1.7.1\(732\), 1.7.2\(256\), 1.7.3.1, 1.7.4, 1.7.5\(62\), 1.8.0\(582\)—
cisco telepresence_recording_serverv ≤ 1.8.0\(160\), 1.6.1\(2\), 1.6.2\(31\), 1.6.3\(4\), 1.7.0\(190\), 1.7.1\(22\), 1.7.2.1, 1.7.3\(3\)—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.