CVE-2012-4072

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-09-20 · updated 2026-06-16
Weakness: CWE-20

Description

The KVM subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers, and read keyboard and mouse events, by leveraging knowledge of this certificate's private key, aka Bug ID CSCte90327.

Affected products

Cisco Unified Computing System (Managed): all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4072
http://www.securitytracker.com/id/1029067
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4072
http://www.securitytracker.com/id/1029067

Get alerted when CVE-2012-4072 or the next vulnerability affects your stack