Hardcoded credentials

The Board Management Controller BMC in the Serial over LAN SoL subsystem in Cisco Unified Computing System UCS relies on a hardcoded private key, which allows man-in-the-middle attackers to obtain sensitive information or modify the data stream by leveraging knowledge of this key, aka Bug ID...

CVE-2012-4074

The CVE-2012-4074 issue affects Cisco Unified Computing System Serial over LAN (SoL) with the Board Management Controller (BMC) using a hard-coded private key. This enables unauthenticated MITM attacks on SoL connections, allowing an attacker to view or modify SoL communications. Root cause: hard...