CVE-2012-4078
high
CVSS v3
—
CVSS v2
8.5
VIR risk
8.5
Description
The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@cisco.com — http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| cisco | unified_computing_system | 1.0\(2k\) | |
| cisco | unified_computing_system | 1.0_base | |
| cisco | unified_computing_system | 1.1\(1m\) | |
| cisco | unified_computing_system | 1.1_base | |
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078
- http://www.securitytracker.com/id/1029084
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87367
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078
- http://www.securitytracker.com/id/1029084
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87367
CWEs
CWE-287
Verify integrity in audit chain (admin only). AS-IS.