PT-2013-1652

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue concerns the fabric-interconnect KVM module in Cisco Unified Computing System UCS, which fails to encrypt video data. This allows man-in-the-middle...

PT-2013-1654

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue concerns the fabric-interconnect component in Cisco Unified Computing System UCS, which fails to encrypt KVM media traffic. This allows remote attackers t...

PT-2013-1651

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue allows local users to gain privileges and read arbitrary files via crafted command parameters within the command-line interface. Recommendations At the...

CVE-2012-4112: Undefined Security Weakness

The Baseboard Management Controller BMC in Cisco Unified Computing System UCS allows local users to gain privileges and execute arbitrary commands via crafted command parameters within the command-line interface, aka Bug ID CSCtr43330...

PT-2013-1655

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue concerns the fabric-interconnect component in Cisco Unified Computing System UCS, which fails to properly verify X.509 certificates. This allows...

PT-2013-1650

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue allows local users to gain privileges and execute arbitrary commands via crafted command parameters within the command-line interface. Recommendations At...

CVE-2012-4116: Exposure of Sensitive Information to an Unauthorized Actor

The fabric-interconnect component in Cisco Unified Computing System UCS does not encrypt KVM media traffic, which allows remote attackers to obtain sensitive information, and consequently complete the authentication process for a server connection, by sniffing the network, aka Bug ID CSCtr72970...

CVE-2012-4106

The fabric-interconnect component in Cisco Unified Computing System UCS uses the same privilege level for execution of every script, which allows local users to gain privileges and execute arbitrary commands via an unspecified script-execution approach, aka Bug ID CSCtq86477...

CVE-2012-4107

The fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges and execute arbitrary commands via crafted parameters to a file-related command, aka Bug ID CSCtq86489...

CVE-2012-4108

The fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges and execute arbitrary operating-system commands via crafted parameters to a file-related command, aka Bug ID CSCtq86554...

Design/Logic Flaw

The fabric-interconnect component in Cisco Unified Computing System UCS uses the same privilege level for execution of every script, which allows local users to gain privileges and execute arbitrary commands via an unspecified script-execution approach, aka Bug ID CSCtq86477...

Design/Logic Flaw

The fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges and execute arbitrary operating-system commands via crafted parameters to a file-related command, aka Bug ID CSCtq86554...

Command injection

The fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges and execute arbitrary commands via crafted parameters to a file-related command, aka Bug ID CSCtq86489...

CVE-2012-4105

The fabric-interconnect component in Cisco Unified Computing System UCS allows local users to cause a denial of service component crash via crafted "debug hardware" parameters, aka Bug ID CSCtq86468...

Code injection

The fabric-interconnect component in Cisco Unified Computing System UCS allows local users to cause a denial of service component crash via crafted "debug hardware" parameters, aka Bug ID CSCtq86468...

CVE-2012-4105

The fabric-interconnect component in Cisco Unified Computing System UCS allows local users to cause a denial of service component crash via crafted "debug hardware" parameters, aka Bug ID CSCtq86468...

CVE-2012-4106

The fabric-interconnect component in Cisco Unified Computing System UCS uses the same privilege level for execution of every script, which allows local users to gain privileges and execute arbitrary commands via an unspecified script-execution approach, aka Bug ID CSCtq86477...

CVE-2012-4107

The fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges and execute arbitrary commands via crafted parameters to a file-related command, aka Bug ID CSCtq86489...

CVE-2012-4106

The CVE-2012-4106 issue affects Cisco UCS fabric interconnects. Affected component: fabric-interconnect in Cisco Unified Computing System (UCS). Root cause: all scripts execute at the same privilege level, allowing a local attacker to escalate privileges and run arbitrary CLI commands via an exis...

CVE-2012-4107

The CVE-2012-4107 entry describes a privilege-escalation flaw in Cisco UCS fabric interconnects. Affected component: fabric interconnect of Cisco Unified Computing System. Root cause: improper filtering of user-supplied parameters to certain file-related commands allows a local attacker to gain e...