CVE-2013-1186

CVE-2013-1186 describes an authentication bypass vulnerability in Cisco Unified Computing System (UCS) versions 1.x before 1.4(4) and 2.x before 2.0(2m). This flaw allows remote attackers to bypass KVM authentication on a Cisco Integrated Management Controller (IMC) by sending a specially crafted authentication request. The vulnerability carries a CVSS score of 7.5 (High), indicating that it is remotely exploitable with low attack complexity and requires no authentication, potentially leading to partial confidentiality, integrity, and availability impacts. Its EPSS score is very low, suggesting a minimal probability of exploitation in the wild. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also non-existent, suggesting it has received very little attention since its disclosure.