CVE-2012-4074

Cisco Unified Computing System - Man-in-the-Middle Attack via Hardcoded BMC Private Key

Title source: llm

Description

The Board Management Controller (BMC) in the Serial over LAN (SoL) subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded private key, which allows man-in-the-middle attackers to obtain sensitive information or modify the data stream by leveraging knowledge of this key, aka Bug ID CSCte90338.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1029073

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4074

Scores

EPSS 0.0122

EPSS Percentile 65.4%

Details

CWE

CWE-255

Status published

Products (1)

cisco/unified_computing_system

Published Sep 20, 2013

Tracked Since Feb 18, 2026