CVEvulnerability
CVE-2012-4078
8.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-09-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656.
Affected configurations
• cisco unified computing system 1.0\(2k\)
• cisco unified computing system 1.0 base
• cisco unified computing system 1.1\(1m\)
• cisco unified computing system 1.1 base
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078 Vendor Advisory
- http://www.securitytracker.com/id/1029084 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87367 exchange.xforce.ibmcloud.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078 Vendor Advisory
- http://www.securitytracker.com/id/1029084 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87367 exchange.xforce.ibmcloud.com