Lucene search
CiscoCVE-2012-4078HistorySep 24, 2013 - 10:35 a.m.
CVE-2012-4078
2013-09-2410:35:51
CWE-287
cisco
web.nvd.nist.gov
28
cisco
ucs
baseboard management controller
bmc
ssh
port forwarding
authentication
cve-2012-4078
nvd
CVSS2
8.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
AI Score
6.7
Confidence
Low
EPSS
0.003
Percentile
68.5%
The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656.
Affected configurations
Node
ciscounified_computing_systemMatch1.0\(2k\)
ORciscounified_computing_systemMatch1.0_base
ORciscounified_computing_systemMatch1.1\(1m\)
ORciscounified_computing_systemMatch1.1_base
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_computing_system | 1.0(2k) | cpe:2.3:a:cisco:unified_computing_system:1.0\(2k\):*:*:*:*:*:*:* |
| cisco | unified_computing_system | 1.0_base | cpe:2.3:a:cisco:unified_computing_system:1.0_base:*:*:*:*:*:*:* |
| cisco | unified_computing_system | 1.1(1m) | cpe:2.3:a:cisco:unified_computing_system:1.1\(1m\):*:*:*:*:*:*:* |
| cisco | unified_computing_system | 1.1_base | cpe:2.3:a:cisco:unified_computing_system:1.1_base:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2012-4078
2013-09-24 10:00:00
nvd
nvd
CVE-2012-4078
2013-09-24 10:35:51
prion
prion
Authentication flaw
2013-09-24 10:35:00
cisco
cisco
CVSS2
8.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
AI Score
6.7
Confidence
Low
EPSS
0.003
Percentile
68.5%
Related for CVE-2012-4078