Unscored CVE-2012-4089 EUVD-2012-4033GHSA-3w6q-chqr-4j8j

MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to execute arbitrary Baseboard Management Con…

Published Sep 24, 2013 · Updated Aug 6, 2024 · Assigned by cisco

Description

MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to execute arbitrary Baseboard Management Controller (BMC) commands by leveraging (1) local, (2) shell-level, or (3) debug-level privileges at the operating-system layer, aka Bug ID CSCtg76239.

References

1029082 vdb-entry
cisco-ucs-cve20124089-command-exec(87369) vdb-entry
20130923 Cisco Unified Computing System Baseboard Management Controller Arbitrary Command Execution Vulnerability vendor-advisory