Skip to main content

Emergency Responder CVE-2012-1346

MEDIUM
Resource Management Errors (CWE-399)
2012-08-06 psirt@cisco.com
Denial Of Service Cisco Emergency Responder
5.0
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:N/I:N/A:P
Attack Vector
Network
Attack Complexity
Low
Confidentiality
None
Integrity
None
Availability
P

Lifecycle Timeline

1
CVE Published
Aug 06, 2012 - 18:55 cve.org
MEDIUM 5.0

DescriptionCVE.org

Cisco Emergency Responder 8.6 and 9.2 allows remote attackers to cause a denial of service (CPU consumption) by sending malformed UDP packets to the CERPT port, aka Bug ID CSCtx38369.

AnalysisAI

Cisco Emergency Responder 8.6 and 9.2 allows remote attackers to cause a denial of service (CPU consumption) by sending malformed UDP packets to the CERPT port, aka Bug ID CSCtx38369. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-399. Cisco Emergency Responder 8.6 and 9.2 allows remote attackers to cause a denial of service (CPU consumption) by sending malformed UDP packets to the CERPT port, aka Bug ID CSCtx38369. Affected products include: Cisco Emergency Responder.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Emergency Responder

View all
CVE-2017-12337 CRITICAL
9.8 Nov 16

A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System softw
CVE-2023-20101 CRITICAL
9.8 Oct 04

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected de
CVE-2016-6468 HIGH
8.8 Dec 14

A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remot
CVE-2024-20352 HIGH
8.8 Apr 03

A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory traver
CVE-2023-20259 HIGH
7.5 Oct 04

A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, rem
CVE-2023-20266 HIGH
7.2 Aug 30

A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communica
CVE-2014-2115 MEDIUM
6.8 Apr 04

Multiple cross-site request forgery (CSRF) vulnerabilities in CERUserServlet pages in Cisco Emergency Responder (ER) 8.6
CVE-2015-6405 MEDIUM
6.8 Dec 13

Cross-site request forgery (CSRF) vulnerability in Cisco Emergency Responder 10.5(1) and 10.5(1a) allows remote attacker
CVE-2016-9208 MEDIUM
6.5 Dec 14

A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emer
CVE-2024-20347 MEDIUM
6.5 Apr 03

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, w
CVE-2021-1226 MEDIUM
6.5 Jan 13

A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Man
CVE-2017-12227 MEDIUM
5.4 Sep 07

A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacke

Same weakness CWE-399 – Resource Management Errors

View all
CVE-2013-3893 HIGH POC
8.8
CVE-2013-0025 CRITICAL POC
9.3
CVE-2015-0064 CRITICAL POC
9.3
CVE-2015-0065 CRITICAL POC
9.3
CVE-2013-3846 CRITICAL POC
9.3
CVE-2016-5427 HIGH
7.5
CVE-2013-0233 MEDIUM POC
6.8
CVE-2013-1305 HIGH
7.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2012-1346 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy