CVE-2012-4081
UnknownEPSS 0.30%
Last modified
CVE-2012-4081 is a vulnerability of currently unknown severity. MCServer in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (application crash) via invalid MCTools parameters, aka Bug ID CSCtg20734.. EPSS estimates a 0.30% chance of exploitation in the next 30 days.
Description
MCServer in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (application crash) via invalid MCTools parameters, aka Bug ID CSCtg20734.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Computing System | 1.0\(2k\) |
| Cisco | Unified Computing System | 1.0_base |
| Cisco | Unified Computing System | 1.1_base |
| Cisco | Unified Computing System | 1.2\(1d\) |
| Cisco | Unified Computing System | 1.2_base |
| Cisco | Unified Computing System | 1.3\(1c\) |
| Cisco | Unified Computing System | 1.3\(1m\) |
| Cisco | Unified Computing System | 1.3\(1n\) |
| Cisco | Unified Computing System | 1.3\(1o\) |
| Cisco | Unified Computing System | 1.3\(1p\) |
| Cisco | Unified Computing System | 1.3\(1q\) |
| Cisco | Unified Computing System | 1.3\(1t\) |
| Cisco | Unified Computing System | 1.3\(1w\) |
| Cisco | Unified Computing System | 1.3\(1y\) |
| Cisco | Unified Computing System | 1.3_base |
| Cisco | Unified Computing System | 1.4\(1m\) |
| Cisco | Unified Computing System | 1.4_base |
References
- http://www.securitytracker.com/id/1029065Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029065Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-4081?
MCServer in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (application crash) via invalid MCTools parameters, aka Bug ID CSCtg20734.
How severe is CVE-2012-4081?
Severity scoring for CVE-2012-4081 is pending analysis. The EPSS model estimates a 0.30% probability of exploitation in the next 30 days.
How do I fix CVE-2012-4081?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-4075Cisco NX-OS allows local users to gain privileges and execut…
- CVE-2012-4076Cisco NX-OS allows local users to gain privileges and execut…
- CVE-2012-4077Cisco NX-OS allows local users to gain privileges and execut…
- CVE-2012-4078The Baseboard Management Controller (BMC) in Cisco Unified C…
- CVE-2012-4079The XML API service in the Fabric Interconnect component in …
- CVE-2012-4080Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2012-4082MCTools in the Cisco Management Controller in Cisco Unified …
- CVE-2012-4083Multiple buffer overflows in the administrative web interfac…
- CVE-2012-4084Cross-site request forgery (CSRF) vulnerability in the web-m…
- CVE-2012-4085The Intelligent Platform Management Interface (IPMI) impleme…
- CVE-2012-4086A setup script for fabric interconnect devices in Cisco Unif…
- CVE-2012-4087A cluster setup script for fabric interconnect devices in Ci…
Are you affected by CVE-2012-4081?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST