VULNERABILITY INTELLIGENCE
CVE-2012-4078
CVSS score8.5 HIGH
EPSS probability3.54%
CISA KEVNot currently listed
Published2013-09-24
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:C/I:C/A:C
Description
The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656.
Weakness classification
- CWE-287: Improper Authentication
Primary references
- psirt@cisco.com — Vendor Advisory
- psirt@cisco.com — Third Party Advisory, VDB Entry
- psirt@cisco.com
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108