CVE-2012-4078

Опубликовано: 24 сент. 2013

Источник: nvd

CVSS2: 8.5

EPSS Низкий

Описание

The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078
Vendor Advisory
http://www.securitytracker.com/id/1029084
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/87367
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078
Vendor Advisory
http://www.securitytracker.com/id/1029084
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/87367

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:unified_computing_system:1.0\(2k\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_computing_system:1.0_base:*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_computing_system:1.1\(1m\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_computing_system:1.1_base:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.0092

Низкий

8.5 High

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-wwrw-xchg-gfw3

github

больше 3 лет назад