Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 20/09/2013 Updated: 23/09/2016

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

The KVM subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded X.509 certificate, which allows man-in-the-middle malicious users to spoof SSL servers, and read keyboard and mouse events, by leveraging knowledge of this certificate's private key, aka Bug ID CSCte90327.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco unified computing system -

A vulnerability in Cisco Unified Computing System software KVM could allow an unauthenticated, remote attacker to intercept a KVM connection to spoof a host or decrypt keyboard and mouse events on an encrypted channel The vulnerability is due to a hard coded SSL certificate An attacker could exploit this vulnerability by intercepting a KVM conne ...

CWE-20 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4072 http://www.securitytracker.com/id/1029067 https://nvd.nist.gov http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20130918-CVE-2012-4072

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2012-4072

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect