Beveiligingsadvies

CVE-2012-4072

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2013-09-20 16:00:00
Laatst bijgewerkt 2024-08-06 20:28:07
Toegewezen door cisco
CVSS-score geen score
Status PUBLISHED

Beschrijving

The KVM subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers, and read keyboard and mouse events, by leveraging knowledge of this certificate's private key, aka Bug ID CSCte90327.