Description
The Board Management Controller (BMC) in the Serial over LAN (SoL) subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded private key, which allows man-in-the-middle attackers to obtain sensitive information or modify the data stream by leveraging knowledge of this key, aka Bug ID CSCte90338.
References
- 1029073 vdb-entry
- 20130917 Cisco Unified Computing System Serial over LAN Static Private Key Vulnerability vendor-advisory