First published: Mon Aug 06 2012(Updated: )
Cisco Emergency Responder 8.6 and 9.2 allows remote attackers to cause a denial of service (CPU consumption) by sending malformed UDP packets to the CERPT port, aka Bug ID CSCtx38369.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Emergency Responder | =8.6 | |
Cisco Emergency Responder | =9.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-1346 is classified as a denial of service vulnerability that can lead to increased CPU consumption.
To mitigate CVE-2012-1346, apply available patches or updates provided by Cisco for affected versions of Emergency Responder.
CVE-2012-1346 affects Cisco Emergency Responder versions 8.6 and 9.2.
CVE-2012-1346 involves remote attackers sending malformed UDP packets to cause a denial of service.
Currently, disabling the CERPT port or restricting access to it are potential workarounds for CVE-2012-1346.