CVEvulnerability

CVE-2012-3075

9.0 HIGH Published 2012-07-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-07-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-78

Description

The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authenticated users to execute arbitrary commands via a malformed request on TCP port 443, aka Bug ID CSCtn99724.

Affected configurations

• cisco telepresence system software (<= 1.7.2\(4937\)) • cisco telepresence system software 1.2.3\(1101\) • cisco telepresence system software 1.3.2\(1393\) • cisco telepresence system software 1.4.7\(2229\) • cisco telepresence system software 1.5.1\(2082\) • cisco telepresence system software 1.5.3\(2115\) • cisco telepresence system software 1.5.10\(3648\) • cisco telepresence system software 1.5.11\(3659\) • cisco telepresence system software 1.5.12\(3701\) • cisco telepresence system software 1.5.13\(3717\) • cisco telepresence system software 1.6.0\(3954\) • cisco telepresence system software 1.6.2\(4023\) • cisco telepresence system software 1.6.3\(4042\) • cisco telepresence system software 1.6.4\(4072\) • cisco telepresence system software 1.6.5\(4097\) • cisco telepresence system software 1.6.6\(4109\) • cisco telepresence system software 1.6.7\(4212\) • cisco telepresence system software 1.6.8\(4222\) • cisco telepresence system software 1.7.0.1\(4764\) • cisco telepresence system software 1.7.0.2\(4719\) • cisco telepresence system software 1.7.1\(4864\) • cisco telepresence system software 1.7.2.1\(2\) • cisco telepresence system 1300 65 • cisco telepresence system 3000 • cisco telepresence system 3010 • cisco telepresence system 3200 • cisco telepresence system 3210 • cisco telepresence system t3 • cisco telepresence system tx1300 47 • cisco telepresence system tx1310 65 • cisco telepresence system tx9000 • cisco telepresence system tx9200

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References