CVE-2012-2486

CWE-94 — Code Injection7 documents4 sources
Severity
8.3HIGH
EPSS
1.0%
top 22.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Cisco Telepresence ManagerCisco Telepresence Multipoint Switch SoftwareCisco Telepresence Recording Server+1 more
Timeline
PublishedJul 12
Latest updateMay 14

Description

The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute arbitrary code by leveraging certain adjacency and sending a malformed CDP packet, aka Bug IDs CSCtz40953, CSCtz40947, CSCtz40965, and CSCtz40953.

CVSS vector

AV:A/AC:L/C:C/I:C/A:CExploitability: 6.5 | Impact: 10.0

Affected Packages4 packages

▶NVDcisco/telepresence_manager1.8.1\(682\)+18

🔴Vulnerability Details

2
GHSA
GHSA-p7jm-64r8-c5vp: The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1↗2022-05-14
▶
CVEList
CVE-2012-2486: The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1↗2012-07-12
▶

📋Vendor Advisories

4
Cisco
Multiple Vulnerabilities in Cisco TelePresence Recording Server↗2012-07-11
▶
Cisco
Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch↗2012-07-11
▶
Cisco
Multiple Vulnerabilities in Cisco TelePresence Manager↗2012-07-11
▶
Cisco
Multiple Vulnerabilities in Cisco TelePresence Immersive Endpoint Devices↗2012-07-11
▶
CVE-2012-2486 (HIGH CVSS 8.3) | The Cisco Discovery Protocol (CDP) | cvebase.io