What’s Vulnerable › Vulnerabilities

CVE-2012-3075

• Severity: critical (CVSS 9.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-07-12 · updated 2026-06-16
• Weakness: CWE-78

Description

The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authenticated users to execute arbitrary commands via a malformed request on TCP port 443, aka Bug ID CSCtn99724.

Affected products

• Cisco Telepresence System 1300 65: all versions
• Cisco Telepresence System 3000: all versions
• Cisco Telepresence System 3010: all versions
• Cisco Telepresence System 3200: all versions
• Cisco Telepresence System 3210: all versions
• Cisco Telepresence System Software: through 1.7.2\(4937\); 1.2.3(1101), 1.3.2(1393), 1.4.7(2229), 1.5.1(2082), 1.5.3(2115), 1.5.10(3648) (+15)
• Cisco Telepresence System T3: all versions
• Cisco Telepresence System Tx1300 47: all versions
• Cisco Telepresence System Tx1310 65: all versions
• Cisco Telepresence System Tx9000: all versions
• Cisco Telepresence System Tx9200: all versions

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts

Get alerted when CVE-2012-3075 or the next vulnerability affects your stack