CVE-2012-2486: Cisco Telepresence Manager
High severity, CVSS 8.3. EPSS: 1.7% chance of exploitation in the next 30 days.
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute arbitrary code by leveraging certain adjacency and sending a malformed CDP packet, aka Bug IDs CSCtz40953, CSCtz40947, CSCtz40965, and CSCtz40953.
Affected products
- Cisco Telepresence Manager: up to and including 1.8.1\(682\); version 1.1.0.0 only; version 1.1.0.0(209) only; version 1.2.0.0 only; version 1.2.0.0(200) only; version 1.3.2(466) only; …
- Cisco Telepresence Multipoint Switch
- Cisco Telepresence Multipoint Switch Software: up to and including 1.8.3\(9\); version 1.0.4.0 only; version 1.0.4.0(21) only; version 1.1.0 only; version 1.1.0(254) only; version 1.1.1 only; …
- Cisco Telepresence Recording Server: up to and including 1.8.0\(160\); version 1.6.1(2) only; version 1.6.2(31) only; version 1.6.3(4) only; version 1.7.0(190) only; version 1.7.1(22) only; …
- Cisco Telepresence System 1300 65
- Cisco Telepresence System 3000
- Cisco Telepresence System 3010
- Cisco Telepresence System 3200
- Cisco Telepresence System 3210
- Cisco Telepresence System Software: up to and including 1.9.0.1\(3\); version 1.2.3(1101) only; version 1.3.2(1393) only; version 1.4.7(2229) only; version 1.5.1(2082) only; version 1.5.3(2115) only; …
- Cisco Telepresence System t3
- Cisco Telepresence System TX1300 47
- Cisco Telepresence System TX1310 65
- Cisco Telepresence System TX9000
- Cisco Telepresence System TX9200
Published 2012-07-12. Last modified 2026-06-16.