Lucene search

CiscoCVELIST:CVE-2012-4114

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-4114

2022-10-0316:15:33

cisco

www.cve.org

cisco ucs

fabric-interconnect

kvm module

vulnerability

man-in-the-middle attack

video data encryption

sniffing

network security

packet tampering

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

43.5%

JSON

The fabric-interconnect KVM module in Cisco Unified Computing System (UCS) does not encrypt video data, which allows man-in-the-middle attackers to watch KVM display content by sniffing the network or modify this traffic by inserting packets into the client-server data stream, aka Bug ID CSCtr72949.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4114