VIR Vulnerability Intelligence Relay

CVE-2012-3075

critical
Published 2012-07-12 · Modified 2026-04-29
💬 Discuss on Community ✚ Propose mitigation
CVSS v3
—
CVSS v4 NEW
—
not yet in upstream
VIR risk
9.0

Description

The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authenticated users to execute arbitrary commands via a malformed request on TCP port 443, aka Bug ID CSCtn99724.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Application impact
VendorProductVersionsFixed
cisco ciscotelepresence_system_software{"endIncluding":"1.7.2\\(4937\\)"}
cisco ciscotelepresence_system_software1.2.3\(1101\)
cisco ciscotelepresence_system_software1.3.2\(1393\)
cisco ciscotelepresence_system_software1.4.7\(2229\)
cisco ciscotelepresence_system_software1.5.1\(2082\)
cisco ciscotelepresence_system_software1.5.3\(2115\)
cisco ciscotelepresence_system_software1.5.10\(3648\)
cisco ciscotelepresence_system_software1.5.11\(3659\)
cisco ciscotelepresence_system_software1.5.12\(3701\)
cisco ciscotelepresence_system_software1.5.13\(3717\)
cisco ciscotelepresence_system_software1.6.0\(3954\)
cisco ciscotelepresence_system_software1.6.2\(4023\)
cisco ciscotelepresence_system_software1.6.3\(4042\)
cisco ciscotelepresence_system_software1.6.4\(4072\)
cisco ciscotelepresence_system_software1.6.5\(4097\)
cisco ciscotelepresence_system_software1.6.6\(4109\)
cisco ciscotelepresence_system_software1.6.7\(4212\)
cisco ciscotelepresence_system_software1.6.8\(4222\)
cisco ciscotelepresence_system_software1.7.0.1\(4764\)
cisco ciscotelepresence_system_software1.7.0.2\(4719\)
cisco ciscotelepresence_system_software1.7.1\(4864\)
cisco ciscotelepresence_system_software1.7.2.1\(2\)

References

CWEs

CWE-78

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.