CVE-2012-4106: Medium severity Cisco Unified Computing System vulnerability
The fabric-interconnect component in Cisco Unified Computing System (UCS) uses the same privilege level for execution of every script, which allows local users to gain privileges and execute arbitrary commands via an unspecified script-execution approach, aka Bug ID CSCtq86477.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4106?
CVE-2012-4106 has been categorized as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2012-4106?
To mitigate CVE-2012-4106, it is recommended to update the Cisco Unified Computing System software to the latest version that addresses this vulnerability.
Who is affected by CVE-2012-4106?
CVE-2012-4106 affects local users of Cisco Unified Computing System who can execute scripts with elevated privileges.
What are the potential impacts of CVE-2012-4106?
An attacker exploiting CVE-2012-4106 could gain elevated privileges and execute arbitrary commands on the affected system.
Is there a workaround for CVE-2012-4106?
Currently, there are no documented workarounds for CVE-2012-4106, so updating the software is the primary recommendation.