CVE-2012-3073

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-07-12 · updated 2026-06-16

Description

The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to cause a denial of service (networking outage or process crash) via (1) malformed IP packets, (2) a high rate of TCP connection requests, or (3) a high rate of TCP connection terminations, aka Bug IDs CSCti21830, CSCti21851, CSCtj19100, CSCtj19086, CSCtj19078, CSCty11219, CSCty11299, CSCty11323, and CSCty11338.

Affected products

Cisco Telepresence Manager: through 1.8.1\(682\); 1.1.0.0, 1.1.0.0(209), 1.2.0.0, 1.2.0.0(200), 1.3.2(466), 1.4.0(279) (+12)
Cisco Telepresence Multipoint Switch: all versions
Cisco Telepresence Multipoint Switch Software: through 1.8.0\(1026\); 1.0.4.0, 1.0.4.0(21), 1.1.0, 1.1.0(254), 1.1.1, 1.1.1(30) (+32)
Cisco Telepresence Recording Server: through 1.8.0\(160\); 1.6.1(2), 1.6.2(31), 1.6.3(4), 1.7.0(190), 1.7.1(22), 1.7.2.1 (+1)
Cisco Telepresence System 1300 65: all versions
Cisco Telepresence System 3000: all versions
Cisco Telepresence System 3010: all versions
Cisco Telepresence System 3200: all versions
Cisco Telepresence System 3210: all versions
Cisco Telepresence System Software: through 1.9.0.1\(3\); 1.2.3(1101), 1.3.2(1393), 1.4.7(2229), 1.5.1(2082), 1.5.3(2115), 1.5.10(3648) (+24)
Cisco Telepresence System T3: all versions
Cisco Telepresence System Tx1300 47: all versions
Cisco Telepresence System Tx1310 65: all versions
Cisco Telepresence System Tx9000: all versions
Cisco Telepresence System Tx9200: all versions

References

Get alerted when CVE-2012-3073 or the next vulnerability affects your stack