CVE-2012-4088

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

The FTP server in Cisco Unified Computing System (UCS) has a hardcoded password for an unspecified user account, which makes it easier for remote attackers to read or modify files by leveraging knowledge of this password, aka Bug ID CSCtg20769.

Metrics

CVSS 2.0 4.3/10AV:A/AC:M/Au:N/C:P/I:P/A:N

Weakness enumeration

CWE-255

Affected software

No affected versions have been published.

Timeline

Published
Sep 26, 2013
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-40896.6MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to execute arbitrary Baseboard Management ContCVE-2012-40904.0The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file inforCVE-2012-40915.0The RIP service engine in Cisco NX-OS allows remote attackers to cause a denial of service (engine restart) via a malformed (1) RIPv4 or (2)CVE-2012-40925.8The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity oCVE-2012-40934.6The Manager component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via an invalid Smart Call HomeCVE-2012-40945.4Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System (UCS) allows remote attackers toCVE-2012-40955.5The local file editor in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges, anCVE-2012-40966.2The local file editor in the Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privilCVE-2012-40974.3The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which allows remote attackers to cause a denial ofCVE-2012-40985.0The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP serCVE-2012-40994.3The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP serCVE-2012-41026.8The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privil
CVE-2012-4088: Medium severity, CVSS 4.3 | Vulnix