Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-4116
cisco
ucs
security vulnerability
fabric-interconnect
kvm
encryption
remote attack
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.9
Confidence
Low
EPSS
0.002
Percentile
53.5%
The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM media traffic, which allows remote attackers to obtain sensitive information, and consequently complete the authentication process for a server connection, by sniffing the network, aka Bug ID CSCtr72970.
Affected configurations
Node
ciscounified_computing_systemMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_computing_system | - | cpe:/h:cisco:unified_computing_system:-::: |
Related
prion
prion
Authentication flaw
2013-10-19 10:36:00
cvelist
cvelist
CVE-2012-4116
2022-10-03 16:15:34
cisco
cisco
nvd
nvd
CVE-2012-4116
2013-10-19 10:36:07
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.9
Confidence
Low
EPSS
0.002
Percentile
53.5%
Related for CVE-2012-4116