CVE-2012-4078 describes a critical authentication bypass vulnerability affecting the Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS). This flaw allows remote authenticated users to bypass an unspecified authentication step through SSH port forwarding, leveraging improper handling of SSH escape sequences. With a CVSS score of 8.5, this vulnerability is highly severe, indicating a network-based attack with medium complexity that can lead to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0\(2k\)CPE matchmatch criteria | cpe:2.3:a:cisco:unified_computing_system:1.0\(2k\):*:*:*:*:*:*:* | ||
1.0_baseCPE matchmatch criteria | cpe:2.3:a:cisco:unified_computing_system:1.0_base:*:*:*:*:*:*:* | ||
1.1\(1m\)CPE matchmatch criteria | cpe:2.3:a:cisco:unified_computing_system:1.1\(1m\):*:*:*:*:*:*:* | ||
1.1_baseCPE matchmatch criteria | cpe:2.3:a:cisco:unified_computing_system:1.1_base:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:S/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.