Lucene search

K
cve[email protected]CVE-2012-4107
HistoryOct 13, 2013 - 10:20 a.m.

CVE-2012-4107

2013-10-1310:20:00
CWE-264
web.nvd.nist.gov
24
cisco
ucs
fabric-interconnect
local privilege escalation
command execution
crafted parameters
security vulnerability
cve-2012-4107

7.5 High

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:N/I:C/A:N

0.0004 Low

EPSS

Percentile

5.2%

The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary commands via crafted parameters to a file-related command, aka Bug ID CSCtq86489.

7.5 High

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:N/I:C/A:N

0.0004 Low

EPSS

Percentile

5.2%

Related for CVE-2012-4107