CVE-2012-4092

MEDIUM

5.8

CVSS Severity Score

EPSS Score0.1270%

EPSS Percentile22.14th

Published2013年9月26日

Last Modified2026年4月29日

Vulnerability Description

The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity of vCenter consoles, which allows man-in-the-middle attackers to read or modify an inter-device data stream by spoofing an identity, aka Bug ID CSCtk00683.

Affected Platforms (CPE)

🔌

Cisco

Unified Computing System

All versions

References & Advisories

🔗 http://secunia.com/advisories/55034

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4092