CVE-2012-1361
published 2012-08-06CVE-2012-1361: Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (MMoH) feature of Cisco Unified Communications Manager (CUCM) is enabled, allows remote attackers to…
PriorityP420medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
1.53%
71.9th percentile
Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (MMoH) feature of Cisco Unified Communications Manager (CUCM) is enabled, allows remote attackers to obtain sensitive crosstalk information by listening during a PSTN call, aka Bug ID CSCtx77750.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
vendor_cisco4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco IOS Software Music on Hold Information Disclosure Vulnerability
vendor_cisco·2012-08-24·CVSS 4.3
CVE-2012-1361 [MEDIUM] CWE-200 Cisco IOS Software Music on Hold Information Disclosure Vulnerability
Cisco IOS Software Music on Hold Information Disclosure Vulnerability
Cisco IOS software contains a vulnerability that could allow an unauthenticated, remote attacker to access and disclose sensitive information.
The vulnerability is due to insecure handling of multicast network traffic. An unauthenticated, remote attacker could exploit the vulnerability by initiating a phone call to the affected system. The vulnerability could allow the attacker to monitor ongoing call information between peers when the call is placed on hold.
Cisco has confirmed the vulnerability and released updated software.
To successfully exploit the vulnerability, the attacker must join the voice call session. To achieve this objective, the attacker may require access to trusted, internal networks. This access
GHSA
GHSA-6g8h-cv9f-crxg: Cisco IOS 15
ghsa_unreviewed·2022-05-17
CVE-2012-1361 [MEDIUM] CWE-200 GHSA-6g8h-cv9f-crxg: Cisco IOS 15
Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (MMoH) feature of Cisco Unified Communications Manager (CUCM) is enabled, allows remote attackers to obtain sensitive crosstalk information by listening during a PSTN call, aka Bug ID CSCtx77750.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2012-08-06
Published