What’s Vulnerable › Vulnerabilities

CVE-2012-3074

• Severity: high (CVSS 8.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-07-12 · updated 2026-06-16
• Weakness: CWE-78

Description

An unspecified API on Cisco TelePresence Immersive Endpoint Devices before 1.9.1 allows remote attackers to execute arbitrary commands by leveraging certain adjacency and sending a malformed request on TCP port 61460, aka Bug ID CSCtz38382.

Affected products

• Cisco Telepresence System 1300 65: all versions
• Cisco Telepresence System 3000: all versions
• Cisco Telepresence System 3010: all versions
• Cisco Telepresence System 3200: all versions
• Cisco Telepresence System 3210: all versions
• Cisco Telepresence System Software: through 1.9.0.1\(3\); 1.2.3(1101), 1.3.2(1393), 1.4.7(2229), 1.5.1(2082), 1.5.3(2115), 1.5.10(3648) (+24)
• Cisco Telepresence System T3: all versions
• Cisco Telepresence System Tx1300 47: all versions
• Cisco Telepresence System Tx1310 65: all versions
• Cisco Telepresence System Tx9000: all versions
• Cisco Telepresence System Tx9200: all versions

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts

Get alerted when CVE-2012-3074 or the next vulnerability affects your stack