CVE-2012-4078

Severity: high (CVSS 8.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-09-24 · updated 2026-06-16
Weakness: CWE-287

Description

The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656.

Affected products

Cisco Unified Computing System (Managed): 1.0(2k), 1.0_base, 1.1(1m), 1.1_base

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078
http://www.securitytracker.com/id/1029084
https://exchange.xforce.ibmcloud.com/vulnerabilities/87367
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4078
http://www.securitytracker.com/id/1029084
https://exchange.xforce.ibmcloud.com/vulnerabilities/87367

Get alerted when CVE-2012-4078 or the next vulnerability affects your stack