CVE-2015-4259 describes a vulnerability in the Integrated Management Controller (IMC) of Cisco Unified Computing System (UCS) C servers running specific software versions (1.5(3) and 1.6(0.16)). The vulnerability stems from the use of a default SSL certificate, which allows man-in-the-middle (MitM) attackers to bypass cryptographic protections by exploiting knowledge of the associated private key. This vulnerability has a CVSS score of 4.3 (Medium), indicating a network-based attack vector with medium complexity and potential for partial confidentiality impact, but no integrity or availability impact. Its EPSS score is very low, suggesting a minimal likelihood of exploitation in the wild. Currently, there is no evidence of active exploitation, nor is exploit code available in common repositories like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also negligible, further indicating a low level of attention and perceived threat.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.5\(3\)CPE matchmatch criteria | cpe:2.3:a:cisco:unified_computing_system:1.5\(3\):*:*:*:*:*:*:* | ||
1.6\(0.16\)CPE matchmatch criteria | cpe:2.3:a:cisco:unified_computing_system:1.6\(0.16\):*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.