CVE-2012-4108: OS Command Injection

Published Oct 13, 2013

Updated

The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary operating-system commands via crafted parameters to a file-related command, aka Bug ID CSCtq86554.

Affected Software

1 affected component

Cisco Unified Computing System

Event History

Oct 13, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-4108?

CVE-2012-4108 has a CVSS severity score that indicates it poses a high risk due to privilege escalation capabilities.

How do I fix CVE-2012-4108?

To fix CVE-2012-4108, apply the latest security patches provided by Cisco for the Unified Computing System software.

Who is impacted by CVE-2012-4108?

CVE-2012-4108 affects local users of the Cisco Unified Computing System who can exploit the vulnerability to gain elevated privileges.

What is the nature of the vulnerability in CVE-2012-4108?

CVE-2012-4108 allows local users to execute arbitrary operating-system commands through crafted parameters in file-related commands.

Is there a workaround for CVE-2012-4108?

There are currently no specific workarounds for CVE-2012-4108 other than applying the recommended security updates.