CVE-2012-1361: Infoleak
Published Aug 6, 2012
·Updated
Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (MMoH) feature of Cisco Unified Communications Manager (CUCM) is enabled, allows remote attackers to obtain sensitive crosstalk information by listening during a PSTN call, aka Bug ID CSCtx77750.
Affected Software
2 affected components
Cisco IOS=15.1
Cisco IOS=15.2
Event History
Aug 6, 2012
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1361?
CVE-2012-1361 is classified as a medium severity vulnerability.
2
How can I fix CVE-2012-1361?
To fix CVE-2012-1361, it is recommended to disable the Multicast Music-on-Hold feature or upgrade to a patched version of Cisco IOS.
3
What types of systems are affected by CVE-2012-1361?
CVE-2012-1361 affects Cisco IOS versions 15.1 and 15.2 when the Multicast Music-on-Hold feature is enabled.
4
What kind of attacks does CVE-2012-1361 facilitate?
CVE-2012-1361 allows remote attackers to obtain sensitive audio from PSTN calls.
5
Is there a known workaround for CVE-2012-1361?
There are no specific workarounds for CVE-2012-1361 other than disabling the vulnerable feature.