CVE-2012-4116

2022-10-0316:15:34

cisco

www.cve.org

cisco

ucs

fabric-interconnect

remote attackers

network sniffing

sensitive information

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

53.5%

JSON

The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM media traffic, which allows remote attackers to obtain sensitive information, and consequently complete the authentication process for a server connection, by sniffing the network, aka Bug ID CSCtr72970.

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4116