CVE-2012-4092

no score yetEPSS 0.8%

The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity of vCenter consoles, which allows man-in-the-middle attackers to read or modify an inter-device data stream by spoofing an identity, aka Bug ID CSCtk00683.

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2013-09-26
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:unified_computing_system

References

http://secunia.com/advisories/55034
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4092
http://secunia.com/advisories/55034
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4092

Check your stack JSON