CVE-2012-4110

run-script in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86560...

CVE-2012-4110

CVE-2012-4110 affects Cisco UCS Fabric Interconnect run-script command injection. A local, authenticated attacker can inject shell commands via an unspecified parameter due to input sanitization failure, gaining a root shell on the underlying OS. A Cisco security advisory confirms exploitation wi...