Lucene search

K
cve[email protected]CVE-2012-4106
HistoryOct 13, 2013 - 10:20 a.m.

CVE-2012-4106

2013-10-1310:20:00
CWE-264
web.nvd.nist.gov
29
cisco
ucs
fabric-interconnect
local users
privileges
arbitrary commands
vulnerability

7.8 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

The fabric-interconnect component in Cisco Unified Computing System (UCS) uses the same privilege level for execution of every script, which allows local users to gain privileges and execute arbitrary commands via an unspecified script-execution approach, aka Bug ID CSCtq86477.

7.8 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

Related for CVE-2012-4106