CVE-2012-4092

MediumCVSS 5.8/10Last modified Jun 16, 2026

Description

The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity of vCenter consoles, which allows man-in-the-middle attackers to read or modify an inter-device data stream by spoofing an identity, aka Bug ID CSCtk00683.

Metrics

CVSS 2.0 5.8/10AV:N/AC:M/Au:N/C:P/I:P/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Sep 26, 2013
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-40934.6The Manager component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via an invalid Smart Call HomeCVE-2012-40945.4Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System (UCS) allows remote attackers toCVE-2012-40955.5The local file editor in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges, anCVE-2012-40966.2The local file editor in the Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privilCVE-2012-40974.3The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which allows remote attackers to cause a denial ofCVE-2012-40985.0The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP serCVE-2012-40994.3The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP serCVE-2012-41026.8The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privilCVE-2012-41036.8ethanalyzer in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding CVE-2012-41046.6Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (CVE-2012-41054.6The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (component crash) CVE-2012-41066.8The fabric-interconnect component in Cisco Unified Computing System (UCS) uses the same privilege level for execution of every script, which
CVE-2012-4092: Medium severity, CVSS 5.8 | Vulnix