Improper input validation in Cisco TelePresence Multipoint Control Unit software version…
Priority MEDIUM 52CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit (MCU) Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. The vulnerability is due to improper size validation when reassembling fragmented IPv4 or IPv6 packets. An attacker could exploit this vulnerability by sending crafted IPv4 or IPv6 fragments to a port receiving content in Passthrough content mode. An exploit could allow the attacker to overflow a buffer. If successful, the attacker could execute arbitrary code or cause a DoS condition on the affected system. Cisco TelePresence MCU platforms TelePresence MCU 5300 Series, TelePresence MCU MSE 8510 and TelePresence MCU 4500 are affected when running software version 4.3(1.68) or later configured for Passthrough content mode. Cisco has released software updates that address this vulnerability. Workarounds that address this vulnerability are not available, but mitigations are available. Cisco Bug IDs: CSCuu67675.
Why it matters now
EPSS 0.06836 94th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Cisco TelePresence Multipoint Control Unit (MCU) software version 4.3(1.68) or later configured for Passthrough content mode | Cisco TelePresence Multipoint Control Unit (MCU) software version 4.3(1.68) or later configured for Passthrough content mode | — | No fix listed | CNA |
- Cisco TelePresence Multipoint Control Unit (MCU) software version 4.3(1.68) or later configured for Passthrough content mode Vendor— Affected Cisco TelePresence Multipoint Control Unit (MCU) software version 4.3(1.68) or later configured for Passthrough content mode Fixed in — No fix listed CNA
CPE configurations NVD · 21
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:telepresence_mcu_software:4.3_\(1.68\):*:*:*:*:*:*:* | 4.3_(1.68) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_mcu_software:4.3_\(2.18\):*:*:*:*:*:*:* | 4.3_(2.18) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_mcu_software:4.3_\(2.30\):*:*:*:*:*:*:* | 4.3_(2.30) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_mcu_software:4.3_\(2.32\):*:*:*:*:*:*:* | 4.3_(2.32) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_mcu_software:4.4_\(3.42\):*:*:*:*:*:*:* | 4.4_(3.42) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_mcu_software:4.4_\(3.49\):*:*:*:*:*:*:* | 4.4_(3.49) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_mcu_software:4.4_\(3.54\):*:*:*:*:*:*:* | 4.4_(3.54) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_mcu_software:4.4_\(3.57\):*:*:*:*:*:*:* | 4.4_(3.57) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_mcu_software:4.4_\(3.67\):*:*:*:*:*:*:* | 4.4_(3.67) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_mcu_software:4.5_\(1.45\):*:*:*:*:*:*:* | 4.5_(1.45) | Vulnerable | Cisco |
- cpe:2.3:a:cisco:telepresence_mcu_software:4.3_\(1.68\):*:*:*:*:*:*:* Versions 4.3_(1.68) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_mcu_software:4.3_\(2.18\):*:*:*:*:*:*:* Versions 4.3_(2.18) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_mcu_software:4.3_\(2.30\):*:*:*:*:*:*:* Versions 4.3_(2.30) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_mcu_software:4.3_\(2.32\):*:*:*:*:*:*:* Versions 4.3_(2.32) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_mcu_software:4.4_\(3.42\):*:*:*:*:*:*:* Versions 4.4_(3.42) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_mcu_software:4.4_\(3.49\):*:*:*:*:*:*:* Versions 4.4_(3.49) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_mcu_software:4.4_\(3.54\):*:*:*:*:*:*:* Versions 4.4_(3.54) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_mcu_software:4.4_\(3.57\):*:*:*:*:*:*:* Versions 4.4_(3.57) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_mcu_software:4.4_\(3.67\):*:*:*:*:*:*:* Versions 4.4_(3.67) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_mcu_software:4.5_\(1.45\):*:*:*:*:*:*:* Versions 4.5_(1.45) Vulnerable ·Cisco
Show 11 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:telepresence_mcu_software:4.5_\(1.55\):*:*:*:*:*:*:* | 4.5_(1.55) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_mcu_software:4.5_\(1.71\):*:*:*:*:*:*:* | 4.5_(1.71) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_mcu_software:4.5_\(1.72\):*:*:*:*:*:*:* | 4.5_(1.72) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_mcu_software:4.5_\(1.85\):*:*:*:*:*:*:* | 4.5_(1.85) | Vulnerable | Cisco |
| cpe:2.3:h:cisco:telepresence_mcu_4505:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:telepresence_mcu_4510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:telepresence_mcu_4515:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:telepresence_mcu_4520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:telepresence_mcu_5310:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:telepresence_mcu_5320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:telepresence_mcu_mse_8510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
- cpe:2.3:a:cisco:telepresence_mcu_software:4.5_\(1.55\):*:*:*:*:*:*:* Versions 4.5_(1.55) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_mcu_software:4.5_\(1.71\):*:*:*:*:*:*:* Versions 4.5_(1.71) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_mcu_software:4.5_\(1.72\):*:*:*:*:*:*:* Versions 4.5_(1.72) Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_mcu_software:4.5_\(1.85\):*:*:*:*:*:*:* Versions 4.5_(1.85) Vulnerable ·Cisco
- cpe:2.3:h:cisco:telepresence_mcu_4505:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:telepresence_mcu_4510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:telepresence_mcu_4515:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:telepresence_mcu_4520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:telepresence_mcu_5310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:telepresence_mcu_5320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:telepresence_mcu_mse_8510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-3792
- 2026-10-03 Alias added: GHSA-9fw8-cmw4-jgmg
References
More Cisco Telepresence Mcu Software vulnerabilities
- TI-2015-00664 The web framework in Cisco TelePresence Advanced Media Gateway Series Software before… CVSS 2.0HIGH 9.0
- TI-2014-02730 The network stack in Cisco TelePresence MCU Software before 4.3(2.30) allows remote… CVSS 2.0HIGH 7.8
- TI-2015-03569 Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence MCU 4500 devices… CVSS 2.0MEDIUM 6.8
Sources
- CVE-2017-3792 · CVE Program
- CVE-2017-3792 · NVD
- FIRST EPSS
- GHSA-9fw8-cmw4-jgmg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences