CVE-2012-4136

Published: Oct 3, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The high-availability service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) does not properly bind the cluster service to the management interface, which allows remote attackers to obtain sensitive information or cause a denial of service (peer-syncing outage) via a TELNET connection, aka Bug ID CSCtz72910.

Affected (1)

Products: Cisco: Unified Computing System

1 product

Unified Computing System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Computing System	All versions

Related CWEs

References (4)

http://secunia.com/advisories/54171

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVS-2012-4136

Source: psirt@cisco.com

Vendor Advisory

http://secunia.com/advisories/54171

Source: af854a3a-2127-422b-91ae-364da2661108

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVS-2012-4136

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.