CVE-2012-4105

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (component crash) via crafted "debug hardware" parameters, aka Bug ID CSCtq86468.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:S/C:N/I:N/A:C

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Oct 13, 2013
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-41066.8The fabric-interconnect component in Cisco Unified Computing System (UCS) uses the same privilege level for execution of every script, whichCVE-2012-41074.6The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary commanCVE-2012-41086.8The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary operatCVE-2012-41096.8The clear sshkey command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges CVE-2012-41106.8run-script in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding cCVE-2012-41116.8The create certreq command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privilegeCVE-2012-41126.8The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrarCVE-2012-41134.6The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and read arbitrary files viaCVE-2012-41145.8The fabric-interconnect KVM module in Cisco Unified Computing System (UCS) does not encrypt video data, which allows man-in-the-middle attacCVE-2012-41155.8The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM virtual-media data, which allows man-in-the-mCVE-2012-41164.3The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM media traffic, which allows remote attackers CVE-2012-41175.8The fabric-interconnect component in Cisco Unified Computing System (UCS) does not properly verify X.509 certificates, which allows man-in-t
CVE-2012-4105: Medium severity, CVSS 4.6 | Vulnix