Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-4106
cisco
ucs
fabric-interconnect
local users
privileges
arbitrary commands
vulnerability
CVSS2
6.8
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:S/C:C/I:C/A:C
AI Score
7.8
Confidence
High
EPSS
0
Percentile
5.1%
The fabric-interconnect component in Cisco Unified Computing System (UCS) uses the same privilege level for execution of every script, which allows local users to gain privileges and execute arbitrary commands via an unspecified script-execution approach, aka Bug ID CSCtq86477.
Affected configurations
Node
ciscounified_computing_systemMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_computing_system | - | cpe:/h:cisco:unified_computing_system:-::: |
Related
prion
prion
Design/Logic Flaw
2013-10-13 10:20:00
cvelist
cvelist
CVE-2012-4106
2022-10-03 16:15:35
nvd
nvd
CVE-2012-4106
2013-10-13 10:20:02
cisco
cisco
CVSS2
6.8
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:S/C:C/I:C/A:C
AI Score
7.8
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVE-2012-4106