Cisco Unified Computing System Baseboard Management Controller Local Command Injection Vulnerability
BID:63177
Info
Cisco Unified Computing System Baseboard Management Controller Local Command Injection Vulnerability
| Bugtraq ID: | 63177 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-4112 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 16 2013 12:00AM |
| Updated: | Oct 21 2013 01:06AM |
| Credit: | Cisco |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Cisco Unified Computing System Baseboard Management Controller Local Command Injection Vulnerability
Cisco Unified Computing System is prone to a local command-injection vulnerability.
A local attacker can exploit this issue to execute arbitrary commands with elevated privileges. Successful exploits may compromise the affected device.
This issue is being tracked by Cisco Bug ID CSCtr43330.
Cisco Unified Computing System is prone to a local command-injection vulnerability.
A local attacker can exploit this issue to execute arbitrary commands with elevated privileges. Successful exploits may compromise the affected device.
This issue is being tracked by Cisco Bug ID CSCtr43330.
Exploit / POC
Cisco Unified Computing System Baseboard Management Controller Local Command Injection Vulnerability
Attackers require local interactive access to exploit this issue.
Attackers require local interactive access to exploit this issue.
Solution / Fix
Cisco Unified Computing System Baseboard Management Controller Local Command Injection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco Unified Computing System Baseboard Management Controller Local Command Injection Vulnerability
References:
References:
- Cisco Homepage (Cisco )