Lucene search

K
nvd[email protected]NVD:CVE-2012-4078
HistorySep 24, 2013 - 10:35 a.m.

CVE-2012-4078

2013-09-2410:35:51
CWE-287
web.nvd.nist.gov
8

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.003

Percentile

68.5%

The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656.

Affected configurations

Nvd
Node
ciscounified_computing_systemMatch1.0\(2k\)
OR
ciscounified_computing_systemMatch1.0_base
OR
ciscounified_computing_systemMatch1.1\(1m\)
OR
ciscounified_computing_systemMatch1.1_base
VendorProductVersionCPE
ciscounified_computing_system1.0(2k)cpe:2.3:a:cisco:unified_computing_system:1.0\(2k\):*:*:*:*:*:*:*
ciscounified_computing_system1.0_basecpe:2.3:a:cisco:unified_computing_system:1.0_base:*:*:*:*:*:*:*
ciscounified_computing_system1.1(1m)cpe:2.3:a:cisco:unified_computing_system:1.1\(1m\):*:*:*:*:*:*:*
ciscounified_computing_system1.1_basecpe:2.3:a:cisco:unified_computing_system:1.1_base:*:*:*:*:*:*:*

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.003

Percentile

68.5%

Related for NVD:CVE-2012-4078