CVE-2012-4078: Cisco Unified Computing System

High severity, CVSS 8.5. EPSS: 3.5% chance of exploitation in the next 30 days.

The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656.

Affected products

• Cisco Unified Computing System: version 1.0(2k) only; version 1.0_base only; version 1.1(1m) only; version 1.1_base only

Published 2013-09-24. Last modified 2026-06-16.