CVE-2012-4078
First published: Tue Sep 24 2013(Updated: )
The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Unified Computing System software | =1.0\(2k\) | |
| Cisco Unified Computing System software | =1.0_base | |
| Cisco Unified Computing System software | =1.1\(1m\) | |
| Cisco Unified Computing System software | =1.1_base |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-4078?
CVE-2012-4078 is classified as a medium severity vulnerability.
How do I fix CVE-2012-4078?
To mitigate CVE-2012-4078, update your Cisco Unified Computing System software to the latest version that addresses this vulnerability.
What type of attack does CVE-2012-4078 facilitate?
CVE-2012-4078 allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding.
Which Cisco Unified Computing System versions are affected by CVE-2012-4078?
CVE-2012-4078 affects Cisco Unified Computing System versions 1.0(2k), 1.0_base, 1.1(1m), and 1.1_base.
Is CVE-2012-4078 a local or remote vulnerability?
CVE-2012-4078 is a remote vulnerability that requires authenticated access to exploit.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco unified computing system software
- version/cisco unified computing system software/1.0\(2k\)
- version/cisco unified computing system software/1.0_base
- version/cisco unified computing system software/1.1\(1m\)
- version/cisco unified computing system software/1.1_base