CVE-2012-2486: The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cis...

Security readout for executives and security teams

This CVE affects older Cisco TelePresence systems. A nearby attacker with the right network adjacency could send a malformed Cisco Discovery Protocol packet and potentially run arbitrary code. The bundle identifies fixed version thresholds, but does not provide CVSS, CWE, or confirmed exploitation evidence. Exposure is most likely in organizations still operating legacy Cisco TelePresence infrastructure on affected releases. The available description indicates adjacency is required, so the bundle does not support broad internet-exposed exploitation assumptions. Treat this as high priority for legacy TelePresence environments because arbitrary code execution is possible. Urgency depends on whether affected systems remain deployed and whether untrusted network adjacency exists. Mitigation focus: Upgrade affected Cisco TelePresence products to the fixed versions named in Cisco guidance.; Check each linked Cisco advisory for product-specific remediation and supported upgrade paths.; Prioritize systems reachable from untrusted or weakly controlled adjacent network segments..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.