CVE-2012-3075: The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remot...

Security readout for executives and security teams

This vulnerability lets an authenticated user run arbitrary commands through the Cisco TelePresence Immersive Endpoint administrative web interface. The available source says affected devices are those running software before 1.7.4. Business risk depends on whether legacy TelePresence endpoints still exist and whether their admin interface is reachable. Exposure is most likely in environments retaining older Cisco TelePresence Immersive Endpoint Devices with the HTTPS administrative interface enabled. Risk is higher if TCP/443 management access is reachable beyond trusted administration networks. Authentication is required, so compromised credentials or shared admin accounts are relevant. Treat this as a high-priority legacy-device cleanup item if Cisco TelePresence Immersive endpoints remain in service. Prioritize devices with reachable management interfaces or weak administrator access controls. If no such devices exist, record non-exposure and move on. Mitigation focus: Identify Cisco TelePresence Immersive Endpoint Devices in inventory.; Check software versions and flag any release before 1.7.4.; Upgrade affected devices to 1.7.4 or vendor-recommended fixed release..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.