VULNERABILITY INTELLIGENCE

CVE-2012-4072

CVSS score4.3 MEDIUM

EPSS probability0.61%

CISA KEVNot currently listed

Published2013-09-20

Last modified2026-06-16

Description

The KVM subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers, and read keyboard and mouse events, by leveraging knowledge of this certificate's private key, aka Bug ID CSCte90327.