CVE-2012-2486
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before...
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute arbitrary code by leveraging certain adjacency and sending a malformed CDP packet, aka Bug IDs CSCtz40953, CSCtz40947, CSCtz40965, and CSCtz40953.
Exploit likelihood
What each source reports
NVD Score used
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute arbitrary code by leveraging certain adjacency and sending a malformed CDP packet, aka Bug IDs CSCtz40953, CSCtz40947, CSCtz40965, and CSCtz40953.
- Record
CVE-2012-2486- CVSS 2.0
- 8.3 High
AV:A/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute arbitrary code by leveraging certain adjacency and sending a malformed CDP packet, aka Bug IDs CSCtz40953, CSCtz40947, CSCtz40965, and CSCtz40953.
- Record
CVE-2012-2486- Updated
- 2026-11-02
EUVDEUVD-2012-2472 No score
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute arbitrary code by leveraging certain adjacency and sending a malformed CDP packet, aka Bug IDs CSCtz40953, CSCtz40947, CSCtz40965, and CSCtz40953.
- Record
EUVD-2012-2472- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p7jm-64r8-c5vp No score
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before...
The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute arbitrary code by leveraging certain adjacency and sending a malformed CDP packet, aka Bug IDs CSCtz40953, CSCtz40947, CSCtz40965, and CSCtz40953.
- Record
GHSA-p7jm-64r8-c5vp- Weakness
- CWE-94
- Updated
- 2026-11-02
Affected products
- cisco telepresence manager
- cisco telepresence multipoint switch
- cisco telepresence recording server
- cisco telepresence multipoint switch software
- cisco telepresence system 1300 65
- cisco telepresence system 3000
- cisco telepresence system 3010
- cisco telepresence system 3200
- cisco telepresence system 3210
- cisco telepresence system software
- cisco telepresence system t3
- cisco telepresence system tx1300 47
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2486 is a high vulnerability (CVSS 8.3) in Cisco Telepresence Manager, published July 12, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.75%, the 77th percentile. No source names a fixed version.
References
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctms
nvd.nist.gov/vuln/detail/CVE-2012-2486
github.com/advisories/GHSA-p7jm-64r8-c5vp