CVE-2012-3073
The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to cause a denial of service (networking outage or process crash) via (1) malformed IP packets, (2) a high rate of TCP connection requests, or (3) a high rate of TCP connection terminations, aka Bug IDs CSCti21830, CSCti21851, CSCtj19100, CSCtj19086, CSCtj19078, CSCty11219, CSCty11299, CSCty11323, and CSCty11338.
- Score
- CVSS 2.0 7.8 High
- Status
- Modified - psirt@cisco.com
- Published
- 2012-07-12
- Last modified
- 2024-09-16
Affected products
- Telepresence Manager (Cisco)
- Telepresence Multipoint Switch (Cisco)
- Telepresence Multipoint Switch Software (Cisco)
- Telepresence Recording Server (Cisco)
- Telepresence System 1300 65 (Cisco)
- Telepresence System 3000 (Cisco)
- Telepresence System 3010 (Cisco)
- Telepresence System 3200 (Cisco)
- Telepresence System 3210 (Cisco)
- Telepresence System Software (Cisco)
- Telepresence System T3 (Cisco)
- Telepresence System Tx1300 47 (Cisco)
- Telepresence System Tx1310 65 (Cisco)
- Telepresence System Tx9000 (Cisco)
- Telepresence System Tx9200 (Cisco)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctms
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctsman