CVE-2012-4092

Cisco Unified Computing System - Man-in-the-Middle Attack via vCenter Console Identity Spoofing

Title source: llm

Description

The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity of vCenter consoles, which allows man-in-the-middle attackers to read or modify an inter-device data stream by spoofing an identity, aka Bug ID CSCtk00683.

References (2)

Core 2

Core References

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/55034

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4092

Scores

EPSS 0.0084

EPSS Percentile 53.5%

Details

CWE

CWE-20

Status published

Products (1)

cisco/unified_computing_system

Published Sep 26, 2013

Tracked Since Feb 18, 2026