CVE-2012-4078

The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656.

CVSS v2.0 8.5 HIGH

8.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:S/C:C/I:C/A:C

Exploitability : 6.8 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078	Vendor Advisory
http://www.securitytracker.com/id/1029084	Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/87367
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078	Vendor Advisory
http://www.securitytracker.com/id/1029084	Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/87367

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cisco:unified_computing_system:1.0\(2k\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:1.0_base:::::::*
	cpe:2.3:a:cisco:unified_computing_system:1.1\(1m\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:1.1_base:::::::*

History

21 Nov 2024, 01:42

Type	Values Removed	Values Added
References	~~() http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078 - Vendor Advisory~~	() http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078 - Vendor Advisory
References	~~() http://www.securitytracker.com/id/1029084 - Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id/1029084 - Third Party Advisory, VDB Entry
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/87367 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/87367 -

Information

Published : 2013-09-24 10:35

Updated : 2024-11-21 01:42

NVD link : CVE-2012-4078

Mitre link : CVE-2012-4078

CVE.ORG link : CVE-2012-4078

JSON object : View

Products Affected

cisco

unified_computing_system

CWE

CWE-287

Improper Authentication

{"id": "CVE-2012-4078", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 8.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-09-24T10:35:51.783", "references": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id/1029084", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87367", "source": "ykramarz@cisco.com"}, {"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1029084", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87367", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656."}, {"lang": "es", "value": "El Baseboard Management Controller (BMC) en Cisco Unified Computing System (UCS) no maneja correctamente secuencias de escape SSH, lo cual permite a usuarios autenticados remotamente saltarse un paso no especificado de autentificaci\u00f3n a trav\u00e9s del reenv\u00edo de puertos SSH, aka Bug ID CSCtg17656."}], "lastModified": "2024-11-21T01:42:10.707", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.0\\(2k\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99A5E1B0-4DC3-41E7-8560-56A94F06283B"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.0_base:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87D49A41-C6A8-46EB-8128-EAF42B91C113"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.1\\(1m\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B88073EC-8B4F-4B87-9BF3-AEF78676C51E"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.1_base:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6046C767-4302-4084-B615-058082219507"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}