CVE-2012-4089

MediumCVSS 6.6/10Last modified Jun 16, 2026

Description

MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to execute arbitrary Baseboard Management Controller (BMC) commands by leveraging (1) local, (2) shell-level, or (3) debug-level privileges at the operating-system layer, aka Bug ID CSCtg76239.

Metrics

CVSS 2.0 6.6/10AV:L/AC:M/Au:S/C:C/I:C/A:C

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4089Vendor Advisory
http://www.securitytracker.com/id/1029082Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/87369
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4089Vendor Advisory
http://www.securitytracker.com/id/1029082Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/87369

Timeline

Published: Sep 24, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-40904.0The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file infor CVE-2012-40915.0The RIP service engine in Cisco NX-OS allows remote attackers to cause a denial of service (engine restart) via a malformed (1) RIPv4 or (2)CVE-2012-40925.8The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity o CVE-2012-40934.6The Manager component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via an invalid Smart Call Home CVE-2012-40945.4Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System (UCS) allows remote attackers to CVE-2012-40955.5The local file editor in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges, an CVE-2012-40966.2The local file editor in the Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privil CVE-2012-40974.3The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which allows remote attackers to cause a denial of CVE-2012-40985.0The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP ser CVE-2012-40994.3The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP ser CVE-2012-41026.8The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privil CVE-2012-41036.8ethanalyzer in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding