CVE-2012-4078
The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.54%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656.
- CVSS 2.0
- 8.5 HIGHAV:N/AC:M/Au:S/C:C/I:C/A:C
- EPSS
- 3.54% probability · 89th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- cisco/unified computing system
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078Vendor Advisory
- http://www.securitytracker.com/id/1029084Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87367
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078Vendor Advisory
- http://www.securitytracker.com/id/1029084Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87367
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.