CVE-2012-4102 describes a privilege escalation vulnerability in the Cisco Unified Computing System (UCS) fabric-interconnect component. A local, authenticated attacker can exploit a flaw in the "activate firmware" command by embedding malicious commands within an unspecified parameter. This vulnerability carries a CVSS score of 6.8, indicating high severity due to complete confidentiality, integrity, and availability impacts, with low attack complexity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion beyond a single mention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:h:cisco:unified_computing_system:-:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:S/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.