{"id":"CVE-2012-4136","url":"https://www.cyber-defence.io/tools/cve/CVE-2012-4136","generatedAt":"2026-10-27T17:43:03.108Z","title":"The high-availability service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) does not properly bind the cluster service to the management interface, which allows remote attackers to obtain sensitive information or cause a…","description":"The high-availability service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) does not properly bind the cluster service to the management interface, which allows remote attackers to obtain sensitive information or cause a denial of service (peer-syncing outage) via a TELNET connection, aka Bug ID CSCtz72910.","published":"2013-10-03T11:03:39.000Z","lastModified":"2026-06-16T23:44:28.000Z","status":"Modified","sourceIdentifier":"psirt@cisco.com","cvss":{"version":"2.0","score":6.8,"severity":"MEDIUM","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P"},"cwe":["CWE-264"],"affected":["cisco/unified computing system"],"epss":{"score":0.0116,"percentile":0.6691,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.16%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://secunia.com/advisories/54171","source":"psirt@cisco.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVS-2012-4136","tags":["Vendor Advisory"],"source":"psirt@cisco.com"},{"url":"http://secunia.com/advisories/54171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVS-2012-4136","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-4136","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}