Unscored severity · published Sep 24, 2013
CVE-2012-4078
The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass…
–
CVSS
3.5%
EPSS
No
On KEV
Description
The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UC
Unified Computing System · Cisco
1.0(2k); 1.0_base; 1.1(1m); 1.1_base · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4078
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4078
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078
Third Party Advisory
http://www.securitytracker.com/id/1029084
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/87367
More from Unified Computing System
9.8
CVE-2015-6435
An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0…
8.8
CVE-2026-20200
Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulnerability
8.8
CVE-2026-20094
Cisco Integrated Management Controller Command Injection Vulnerability
8.8
CVE-2021-1368
A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute…
8.8
CVE-2019-1907
A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to set sensitive configuration values and gain…