Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Cisco TelePresence devices may crash from bad network traffic

CVE-2012-3073 · published 14 years ago
Summary

Older versions of Cisco TelePresence Multipoint Switch, Manager and Recording Server can stop working when they receive malformed IP packets or a flood of connection requests. This can cause a loss of video conferencing service. Update the software to the latest releases and consider network filtering to block suspicious traffic.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco telepresence_multipoint_switch_software <= 1.8.0\(1026\)
1.0.4.0
1.0.4.0\(21\)
1.1.0
1.1.0\(254\)
1.1.1
1.1.1\(30\)
1.1.2
1.1.2\(6\)
1.5.0
1.5.0\(222\)
1.5.1
27 more version ranges
cpe:2.3:a:cisco:telepresence_multipoint_switch_software:*:*:*:*:*:*:*:*
cisco telepresence_multipoint_switch All versions
cpe:2.3:h:cisco:telepresence_multipoint_switch:*:*:*:*:*:*:*:*
cisco telepresence_system_software <= 1.9.0.1\(3\)
1.2.3\(1101\)
1.3.2\(1393\)
1.4.7\(2229\)
1.5.1\(2082\)
1.5.3\(2115\)
1.5.10\(3648\)
1.5.11\(3659\)
1.5.12\(3701\)
1.5.13\(3717\)
1.6.0\(3954\)
1.6.2\(4023\)
19 more version ranges
cpe:2.3:a:cisco:telepresence_system_software:*:*:*:*:*:*:*:*
cisco telepresence_system_1300_65 All versions
cpe:2.3:h:cisco:telepresence_system_1300_65:*:*:*:*:*:*:*:*
cisco telepresence_system_3000 All versions
cpe:2.3:h:cisco:telepresence_system_3000:*:*:*:*:*:*:*:*
cisco telepresence_system_3010 All versions
cpe:2.3:h:cisco:telepresence_system_3010:*:*:*:*:*:*:*:*
cisco telepresence_system_3200 All versions
cpe:2.3:h:cisco:telepresence_system_3200:*:*:*:*:*:*:*:*
cisco telepresence_system_3210 All versions
cpe:2.3:h:cisco:telepresence_system_3210:*:*:*:*:*:*:*:*
cisco telepresence_system_t3 All versions
cpe:2.3:h:cisco:telepresence_system_t3:*:*:*:*:*:*:*:*
cisco telepresence_system_tx1300_47 All versions
cpe:2.3:h:cisco:telepresence_system_tx1300_47:*:*:*:*:*:*:*:*
cisco telepresence_system_tx1310_65 All versions
cpe:2.3:h:cisco:telepresence_system_tx1310_65:*:*:*:*:*:*:*:*
cisco telepresence_system_tx9000 All versions
cpe:2.3:h:cisco:telepresence_system_tx9000:*:*:*:*:*:*:*:*
cisco telepresence_system_tx9200 All versions
cpe:2.3:h:cisco:telepresence_system_tx9200:*:*:*:*:*:*:*:*
cisco telepresence_manager <= 1.8.1\(682\)
1.1.0.0
1.1.0.0\(209\)
1.2.0.0
1.2.0.0\(200\)
1.3.2\(466\)
1.4.0\(279\)
1.5.1\(420\)
1.5.2\(423\)
1.6.0\(220\)
1.6.2\(64\)
1.6.3\(113\)
7 more version ranges
cpe:2.3:a:cisco:telepresence_manager:*:*:*:*:*:*:*:*
cisco telepresence_recording_server <= 1.8.0\(160\)
1.6.1\(2\)
1.6.2\(31\)
1.6.3\(4\)
1.7.0\(190\)
1.7.1\(22\)
1.7.2.1
1.7.3\(3\)
cpe:2.3:a:cisco:telepresence_recording_server:*:*:*:*:*:*:*:*
Original advisory text
The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers ...
The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to cause a denial of service (networking outage or process crash) via (1) malformed IP packets, (2) a high rate of TCP connection requests, or (3) a high rate of TCP connection terminations, aka Bug IDs CSCti21830, CSCti21851, CSCtj19100, CSCtj19086, CSCtj19078, CSCty11219, CSCty11299, CSCty11323, and CSCty11338.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.8 High
Exploitation
2% chance of attack within 30 days
Timeline
Published12 Jul 2012
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2012-3073 · NVD
Track software like this
Free during beta