CVE-2012-4136: Medium severity cisco unified computing system software vulnerability
The high-availability service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) does not properly bind the cluster service to the management interface, which allows remote attackers to obtain sensitive information or cause a denial of service (peer-syncing outage) via a TELNET connection, aka Bug ID CSCtz72910.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4136?
CVE-2012-4136 is considered a high-severity vulnerability due to the potential for remote attackers to obtain sensitive information or cause a denial of service.
How do I fix CVE-2012-4136?
To fix CVE-2012-4136, you should update your Cisco Unified Computing System software to the latest version provided by Cisco.
What causes the vulnerability in CVE-2012-4136?
CVE-2012-4136 is caused by the high-availability service in Cisco Unified Computing System not properly binding the cluster service to the management interface.
Who is affected by CVE-2012-4136?
CVE-2012-4136 affects users of Cisco Unified Computing System software, particularly those utilizing the Fabric Interconnect component.
What types of attacks are possible through CVE-2012-4136?
Through CVE-2012-4136, remote attackers may either obtain sensitive information or cause a denial of service via peer-syncing outages.