Design/Logic Flaw

2012-07-1210:34:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.2%

JSON

The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute arbitrary code by leveraging certain adjacency and sending a malformed CDP packet, aka Bug IDs CSCtz40953, CSCtz40947, CSCtz40965, and CSCtz40953.

CPENameOperatorVersion
telepresence_managereq1.7.4
telepresence_managereq1.6.220
telepresence_managereq1.4.279
telepresence_managereq1.7.1732
telepresence_managereq<= 1.8.1682
telepresence_managereq1.6.3113
telepresence_managereq1.7.2256
telepresence_managereq1.1.209
telepresence_managereq1.6.5167
telepresence_managereq1.2.200

Name	Operator	Version
telepresence_manager	eq	1.7.4
telepresence_manager	eq	1.6.220
telepresence_manager	eq	1.4.279
telepresence_manager	eq	1.7.1732
telepresence_manager	eq	<= 1.8.1682
telepresence_manager	eq	1.6.3113
telepresence_manager	eq	1.7.2256
telepresence_manager	eq	1.1.209
telepresence_manager	eq	1.6.5167
telepresence_manager	eq	1.2.200