CVE-2012-3074 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Vector
NIST	NIST	8.3 UNKNOWN	ADJACENT_NETWORK	LOW	AV:A/AC:L/Au:N/C:C/I:C/A:C
cisco	CNA	---			---
CVE	ADP	---			---

Base Score

CVSS 3.x

EPSS Score

Percentile: 74%

Vendor	Product	Version
cisco	telepresence_system_software	𝑥 ≤ 1.9.0.1\(3\)
cisco	telepresence_system_software	1.2.3\(1101\)
cisco	telepresence_system_software	1.3.2\(1393\)
cisco	telepresence_system_software	1.4.7\(2229\)
cisco	telepresence_system_software	1.5.1\(2082\)
cisco	telepresence_system_software	1.5.3\(2115\)
cisco	telepresence_system_software	1.5.10\(3648\)
cisco	telepresence_system_software	1.5.11\(3659\)
cisco	telepresence_system_software	1.5.12\(3701\)
cisco	telepresence_system_software	1.5.13\(3717\)
cisco	telepresence_system_software	1.6.0\(3954\)
cisco	telepresence_system_software	1.6.2\(4023\)
cisco	telepresence_system_software	1.6.3\(4042\)
cisco	telepresence_system_software	1.6.4\(4072\)
cisco	telepresence_system_software	1.6.5\(4097\)
cisco	telepresence_system_software	1.6.6\(4109\)
cisco	telepresence_system_software	1.6.7\(4212\)
cisco	telepresence_system_software	1.6.8\(4222\)
cisco	telepresence_system_software	1.7.0.1\(4764\)
cisco	telepresence_system_software	1.7.0.2\(4719\)
cisco	telepresence_system_software	1.7.1\(4864\)
cisco	telepresence_system_software	1.7.2\(4937\)
cisco	telepresence_system_software	1.7.2.1\(2\)
cisco	telepresence_system_software	1.7.4\(270\)
cisco	telepresence_system_software	1.7.5\(42\)
cisco	telepresence_system_software	1.7.6\(4\)
cisco	telepresence_system_software	1.8.0\(55\)
cisco	telepresence_system_software	1.8.1\(34\)
cisco	telepresence_system_software	1.8.2\(11\)
cisco	telepresence_system_software	1.8.3\(4\)
cisco	telepresence_system_software	1.9.0\(46\)
cisco	telepresence_system_1300_65	*
cisco	telepresence_system_3000	*
cisco	telepresence_system_3010	*
cisco	telepresence_system_3200	*
cisco	telepresence_system_3210	*
cisco	telepresence_system_t3	*
cisco	telepresence_system_t3	*
cisco	telepresence_system_tx1300_47	*
cisco	telepresence_system_tx1310_65	*
cisco	telepresence_system_tx9000	*
cisco	telepresence_system_tx9200	*

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The software constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts