The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before…
Priority MEDIUM 43CWE-78Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-78.
Summary
The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authenticated users to execute arbitrary commands via a malformed request on TCP port 443, aka Bug ID CSCtn99724.
Why it matters now
EPSS 0.02165 82nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 33
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:telepresence_system_software:*:*:*:*:*:*:*:* | up to 1.7.2\(4937\) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.2.3\(1101\):*:*:*:*:*:*:* | 1.2.3(1101) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.3.2\(1393\):*:*:*:*:*:*:* | 1.3.2(1393) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.4.7\(2229\):*:*:*:*:*:*:* | 1.4.7(2229) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.5.1\(2082\):*:*:*:*:*:*:* | 1.5.1(2082) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.5.3\(2115\):*:*:*:*:*:*:* | 1.5.3(2115) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.5.10\(3648\):*:*:*:*:*:*:* | 1.5.10(3648) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.5.11\(3659\):*:*:*:*:*:*:* | 1.5.11(3659) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.5.12\(3701\):*:*:*:*:*:*:* | 1.5.12(3701) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.5.13\(3717\):*:*:*:*:*:*:* | 1.5.13(3717) | Vulnerable | Cisco |
- cpe:2.3:a:cisco:telepresence_system_software:*:*:*:*:*:*:*:* Versions up to 1.7.2\(4937\) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.2.3\(1101\):*:*:*:*:*:*:* Versions 1.2.3(1101) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.3.2\(1393\):*:*:*:*:*:*:* Versions 1.3.2(1393) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.4.7\(2229\):*:*:*:*:*:*:* Versions 1.4.7(2229) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.5.1\(2082\):*:*:*:*:*:*:* Versions 1.5.1(2082) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.5.3\(2115\):*:*:*:*:*:*:* Versions 1.5.3(2115) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.5.10\(3648\):*:*:*:*:*:*:* Versions 1.5.10(3648) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.5.11\(3659\):*:*:*:*:*:*:* Versions 1.5.11(3659) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.5.12\(3701\):*:*:*:*:*:*:* Versions 1.5.12(3701) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.5.13\(3717\):*:*:*:*:*:*:* Versions 1.5.13(3717) Vulnerable ·Cisco
Show 23 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:telepresence_system_software:1.6.0\(3954\):*:*:*:*:*:*:* | 1.6.0(3954) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.6.2\(4023\):*:*:*:*:*:*:* | 1.6.2(4023) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.6.3\(4042\):*:*:*:*:*:*:* | 1.6.3(4042) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.6.4\(4072\):*:*:*:*:*:*:* | 1.6.4(4072) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.6.5\(4097\):*:*:*:*:*:*:* | 1.6.5(4097) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.6.6\(4109\):*:*:*:*:*:*:* | 1.6.6(4109) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.6.7\(4212\):*:*:*:*:*:*:* | 1.6.7(4212) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.6.8\(4222\):*:*:*:*:*:*:* | 1.6.8(4222) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.7.0.1\(4764\):*:*:*:*:*:*:* | 1.7.0.1(4764) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.7.0.2\(4719\):*:*:*:*:*:*:* | 1.7.0.2(4719) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.7.1\(4864\):*:*:*:*:*:*:* | 1.7.1(4864) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_system_software:1.7.2.1\(2\):*:*:*:*:*:*:* | 1.7.2.1(2) | Vulnerable | Cisco |
| cpe:2.3:h:cisco:telepresence_system_1300_65:*:*:*:*:*:*:*:* | all versions | Vulnerable | Cisco |
| cpe:2.3:h:cisco:telepresence_system_3000:*:*:*:*:*:*:*:* | all versions | Vulnerable | Cisco |
| cpe:2.3:h:cisco:telepresence_system_3010:*:*:*:*:*:*:*:* | all versions | Vulnerable | Cisco |
| cpe:2.3:h:cisco:telepresence_system_3200:*:*:*:*:*:*:*:* | all versions | Vulnerable | Cisco |
| cpe:2.3:h:cisco:telepresence_system_3210:*:*:*:*:*:*:*:* | all versions | Vulnerable | Cisco |
| cpe:2.3:h:cisco:telepresence_system_t3:*:*:*:*:*:*:*:* | all versions | Vulnerable | Cisco |
| cpe:2.3:h:cisco:telepresence_system_t3:*:*:custom:*:*:*:*:* | all versions | Vulnerable | Cisco |
| cpe:2.3:h:cisco:telepresence_system_tx1300_47:*:*:*:*:*:*:*:* | all versions | Vulnerable | Cisco |
| cpe:2.3:h:cisco:telepresence_system_tx1310_65:*:*:*:*:*:*:*:* | all versions | Vulnerable | Cisco |
| cpe:2.3:h:cisco:telepresence_system_tx9000:*:*:*:*:*:*:*:* | all versions | Vulnerable | Cisco |
| cpe:2.3:h:cisco:telepresence_system_tx9200:*:*:*:*:*:*:*:* | all versions | Vulnerable | Cisco |
- cpe:2.3:a:cisco:telepresence_system_software:1.6.0\(3954\):*:*:*:*:*:*:* Versions 1.6.0(3954) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.6.2\(4023\):*:*:*:*:*:*:* Versions 1.6.2(4023) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.6.3\(4042\):*:*:*:*:*:*:* Versions 1.6.3(4042) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.6.4\(4072\):*:*:*:*:*:*:* Versions 1.6.4(4072) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.6.5\(4097\):*:*:*:*:*:*:* Versions 1.6.5(4097) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.6.6\(4109\):*:*:*:*:*:*:* Versions 1.6.6(4109) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.6.7\(4212\):*:*:*:*:*:*:* Versions 1.6.7(4212) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.6.8\(4222\):*:*:*:*:*:*:* Versions 1.6.8(4222) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.7.0.1\(4764\):*:*:*:*:*:*:* Versions 1.7.0.1(4764) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.7.0.2\(4719\):*:*:*:*:*:*:* Versions 1.7.0.2(4719) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.7.1\(4864\):*:*:*:*:*:*:* Versions 1.7.1(4864) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_system_software:1.7.2.1\(2\):*:*:*:*:*:*:* Versions 1.7.2.1(2) Vulnerable ·Cisco
- cpe:2.3:h:cisco:telepresence_system_1300_65:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
- cpe:2.3:h:cisco:telepresence_system_3000:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
- cpe:2.3:h:cisco:telepresence_system_3010:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
- cpe:2.3:h:cisco:telepresence_system_3200:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
- cpe:2.3:h:cisco:telepresence_system_3210:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
- cpe:2.3:h:cisco:telepresence_system_t3:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
- cpe:2.3:h:cisco:telepresence_system_t3:*:*:custom:*:*:*:*:* Versions all versions Vulnerable ·Cisco
- cpe:2.3:h:cisco:telepresence_system_tx1300_47:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
- cpe:2.3:h:cisco:telepresence_system_tx1310_65:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
- cpe:2.3:h:cisco:telepresence_system_tx9000:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
- cpe:2.3:h:cisco:telepresence_system_tx9200:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2012-3075
- 2026-10-03 Alias added: GHSA-j923-487j-w32h
References
More Cisco Telepresence System 1300 65 vulnerabilities
- TI-2012-02176 The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch… CVSS 2.0HIGH 8.3
- TI-2012-02650 An unspecified API on Cisco TelePresence Immersive Endpoint Devices before 1.9.1 allows… CVSS 2.0HIGH 8.3
- TI-2012-02649 The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco… CVSS 2.0HIGH 7.8
Sources
- CVE-2012-3075 · CVE Program
- CVE-2012-3075 · NVD
- FIRST EPSS
- GHSA-j923-487j-w32h · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences