CVE-2012-4072

2013-09-2016:00:00

cisco

www.cve.org

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

38.3%

JSON

The KVM subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers, and read keyboard and mouse events, by leveraging knowledge of this certificate’s private key, aka Bug ID CSCte90327.