First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2012-4104

MediumCVSS 6.6/10Last modified Jun 16, 2026

Description

Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to overwrite or delete arbitrary files via a full pathname in an image header, aka Bug ID CSCtq02706.

Metrics

CVSS 2.0 6.6/10AV:L/AC:M/Au:S/C:C/I:C/A:C

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4104Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4104Vendor Advisory

Timeline

Published: Oct 2, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-41054.6The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (component crash) CVE-2012-41066.8The fabric-interconnect component in Cisco Unified Computing System (UCS) uses the same privilege level for execution of every script, which CVE-2012-41074.6The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary comman CVE-2012-41086.8The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary operat CVE-2012-41096.8The clear sshkey command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges CVE-2012-41106.8run-script in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding c CVE-2012-41116.8The create certreq command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privilege CVE-2012-41126.8The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrar CVE-2012-41134.6The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and read arbitrary files via CVE-2012-41145.8The fabric-interconnect KVM module in Cisco Unified Computing System (UCS) does not encrypt video data, which allows man-in-the-middle attac CVE-2012-41155.8The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM virtual-media data, which allows man-in-the-m CVE-2012-41164.3The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM media traffic, which allows remote attackers