Sign-up

ID

VAR-201207-0177


CVE

CVE-2012-3076


TITLE

Cisco TelePresence Recording Server WEB Interface Remote Command Injection Vulnerability

Trust: 1.5

sources: CNVD: CNVD-2012-3677 // BID: 54385 // CNNVD: CNNVD-201207-140

DESCRIPTION

The administrative web interface on Cisco TelePresence Recording Server before 1.8.0 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Bug ID CSCth85804. The problem is Bug ID CSCth85804 It is a problem.An arbitrary command may be executed by a remotely authenticated user. Cisco TelePresence is a telepresence conferencing solution developed by Cisco. Successful exploits will result in the execution of arbitrary attacker-supplied commands in the context of the root user. This may facilitate a complete compromise. This issue is being tracked by Cisco bug ID CSCti21830. The solution provides components such as audio and video spaces, which can provide remote participants with a "face-to-face" virtual meeting room effect. A remote attacker could exploit this vulnerability to execute arbitrary commands through an unknown vector. ---------------------------------------------------------------------- We are millions! Join us to protect all Pc's Worldwide. Download the new Secunia PSI 3.0 available in 5 languages and share it with your friends: http://secunia.com/psi ---------------------------------------------------------------------- TITLE: Cisco TelePresence Recording Server Two Vulnerabilities SECUNIA ADVISORY ID: SA49864 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/49864/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=49864 RELEASE DATE: 2012-07-12 DISCUSS ADVISORY: http://secunia.com/advisories/49864/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/49864/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=49864 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: Two vulnerabilities have been reported in Cisco TelePresence Recording Server, which can be exploited by malicious users and malicious people to compromise a vulnerable system. 2) An error within the handling of Cisco Discovery Protocol (CDP) packets in the CDP component can be exploited to execute arbitrary code by sending a specially crafted CDP packet. Successful exploitation requires the ability to send an Ethernet frame directly to the device. The vulnerability is reported in versions 1.6 and prior, 1.7, and 1.8. SOLUTION: Update to version 1.8.1. PROVIDED AND/OR DISCOVERED BY: Reported by the vendor. ORIGINAL ADVISORY: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.61

sources: NVD: CVE-2012-3076 // JVNDB: JVNDB-2012-003061 // CNVD: CNVD-2012-3677 // BID: 54385 // VULHUB: VHN-56357 // PACKETSTORM: 114656

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2012-3677

AFFECTED PRODUCTS

vendor:ciscomodel:telepresence recording serverscope:eqversion:1.7.2.1

Trust: 2.5

vendor:ciscomodel:telepresence recording serverscope:eqversion:1.6.3\(4\)

Trust: 1.6

vendor:ciscomodel:telepresence recording serverscope:eqversion:1.6.2\(31\)

Trust: 1.6

vendor:ciscomodel:telepresence recording serverscope:eqversion:1.6.1\(2\)

Trust: 1.6

vendor:ciscomodel:telepresence recording serverscope:eqversion:1.7.0\(190\)

Trust: 1.6

vendor:ciscomodel:telepresence recording serverscope:eqversion:1.7.1\(22\)

Trust: 1.6

vendor:ciscomodel:telepresence recording serverscope:lteversion:1.7.3\(3\)

Trust: 1.0

vendor:ciscomodel:telepresence recording serverscope:eqversion:1.6

Trust: 0.9

vendor:ciscomodel:telepresence recording serverscope:eqversion:1.6.1

Trust: 0.9

vendor:ciscomodel:telepresence recording serverscope:eqversion:1.7.1

Trust: 0.9

vendor:ciscomodel:telepresence recording serverscope:eqversion:1.6.2

Trust: 0.9

vendor:ciscomodel:telepresence recording serverscope:eqversion:1.7.2

Trust: 0.9

vendor:ciscomodel:telepresence recording serverscope:ltversion:1.8.0

Trust: 0.8

vendor:ciscomodel:telepresence recording serverscope:eqversion:1.7.3\(3\)

Trust: 0.6

sources: CNVD: CNVD-2012-3677 // BID: 54385 // JVNDB: JVNDB-2012-003061 // CNNVD: CNNVD-201207-140 // NVD: CVE-2012-3076

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2012-3076
value: HIGH

Trust: 1.0

NVD: CVE-2012-3076
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201207-140
value: CRITICAL

Trust: 0.6

VULHUB: VHN-56357
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2012-3076
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-56357
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-56357 // JVNDB: JVNDB-2012-003061 // CNNVD: CNNVD-201207-140 // NVD: CVE-2012-3076

PROBLEMTYPE DATA

problemtype:CWE-78

Trust: 1.9

sources: VULHUB: VHN-56357 // JVNDB: JVNDB-2012-003061 // NVD: CVE-2012-3076

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201207-140

TYPE

operating system commend injection

Trust: 0.6

sources: CNNVD: CNNVD-201207-140

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2012-003061

PATCH
title:cisco-sa-20120711-ctrsurl:http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs
Trust: 1.6
title:26343url:http://tools.cisco.com/security/center/viewAlert.x?alertId=26343
Trust: 0.8
title:Cisco TelePresence Recording Server WEB Interface Remote Command Injection Vulnerability Patchurl:https://www.cnvd.org.cn/patchInfo/show/18835
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2012-3677 // 
            
            
            
            JVNDB: JVNDB-2012-003061

EXTERNAL IDS
db:NVDid:CVE-2012-3076
Trust: 3.4
db:BIDid:54385
Trust: 1.0
db:JVNDBid:JVNDB-2012-003061
Trust: 0.8
db:CNNVDid:CNNVD-201207-140
Trust: 0.7
db:SECUNIAid:49864
Trust: 0.7
db:CNVDid:CNVD-2012-3677
Trust: 0.6
db:CISCOid:20120711 MULTIPLE VULNERABILITIES IN CISCO TELEPRESENCE RECORDING SERVER
Trust: 0.6
db:NSFOCUSid:19981
Trust: 0.6
db:VULHUBid:VHN-56357
Trust: 0.1
db:PACKETSTORMid:114656
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2012-3677 // 
            
            
            
            VULHUB: VHN-56357 // 
            
            
            
            BID: 54385 // 
            
            
            
            JVNDB: JVNDB-2012-003061 // 
            
            
            
            PACKETSTORM: 114656 // 
            
            
            
            CNNVD: CNNVD-201207-140 // 
            
            
            
            NVD: CVE-2012-3076

REFERENCES
url:http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20120711-ctrs
Trust: 2.4
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-3076
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-3076
Trust: 0.8
url:http://secunia.com/advisories/49864
Trust: 0.6
url:http://www.securityfocus.com/bid/54385
Trust: 0.6
url:http://www.nsfocus.net/vulndb/19981
Trust: 0.6
url:http://www.cisco.com
Trust: 0.3
url:http://secunia.com/psi
Trust: 0.1
url:http://secunia.com/vulnerability_intelligence/
Trust: 0.1
url:http://secunia.com/advisories/secunia_security_advisories/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
Trust: 0.1
url:https://ca.secunia.com/?page=viewadvisory&vuln_id=49864
Trust: 0.1
url:http://secunia.com/advisories/49864/
Trust: 0.1
url:http://secunia.com/advisories/49864/#comments
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/personal/
Trust: 0.1
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.1
url:http://secunia.com/advisories/about_secunia_advisories/
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2012-3677 // 
            
            
            
            VULHUB: VHN-56357 // 
            
            
            
            BID: 54385 // 
            
            
            
            JVNDB: JVNDB-2012-003061 // 
            
            
            
            PACKETSTORM: 114656 // 
            
            
            
            CNNVD: CNNVD-201207-140 // 
            
            
            
            NVD: CVE-2012-3076

CREDITS
Cisco
Trust: 0.9
sources:
            
            
            BID: 54385 // 
            
            
            
            CNNVD: CNNVD-201207-140

SOURCES
db:CNVDid:CNVD-2012-3677
db:VULHUBid:VHN-56357
db:BIDid:54385
db:JVNDBid:JVNDB-2012-003061
db:PACKETSTORMid:114656
db:CNNVDid:CNNVD-201207-140
db:NVDid:CVE-2012-3076

LAST UPDATE DATE
2024-11-23T22:02:39.696000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2012-3677date:2012-07-17T00:00:00
db:VULHUBid:VHN-56357date:2012-07-12T00:00:00
db:BIDid:54385date:2012-07-11T00:00:00
db:JVNDBid:JVNDB-2012-003061date:2012-07-13T00:00:00
db:CNNVDid:CNNVD-201207-140date:2012-07-13T00:00:00
db:NVDid:CVE-2012-3076date:2024-11-21T01:40:11.880

SOURCES RELEASE DATE
db:CNVDid:CNVD-2012-3677date:2012-07-17T00:00:00
db:VULHUBid:VHN-56357date:2012-07-12T00:00:00
db:BIDid:54385date:2012-07-11T00:00:00
db:JVNDBid:JVNDB-2012-003061date:2012-07-13T00:00:00
db:PACKETSTORMid:114656date:2012-07-12T06:05:41
db:CNNVDid:CNNVD-201207-140date:2012-07-13T00:00:00
db:NVDid:CVE-2012-3076date:2012-07-12T10:34:42.427