Remote Command Execution Vulnerability in Cisco TelePresence Immersive Endpoint Devices
CVE-2012-3075

Currently unrated

Key Information:

Vendor
Cisco
Status
Telepresence System Software
Telepresence System 1300 65
Telepresence System 3000
Telepresence System 3010
Vendor
CVE Published:
12 July 2012

Summary

The administrative web interface of Cisco TelePresence Immersive Endpoint Devices prior to version 1.7.4 is vulnerable to remote command execution. This occurs when authenticated users send malformed requests over TCP port 443, allowing them to execute arbitrary commands. This vulnerability highlights the importance of ensuring that firmware is updated to the latest versions to protect against potential exploits.

References

http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.