4.6

CVE-2012-4081

MCServer in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (application crash) via invalid MCTools parameters, aka Bug ID CSCtg20734.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Unified Computing System Version 1.0_base
Cisco ≫ Unified Computing System Version 1.1_base
Cisco ≫ Unified Computing System Version 1.2_base
Cisco ≫ Unified Computing System Version 1.3_base
Cisco ≫ Unified Computing System Version 1.4_base
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.31% 0.219
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.6 3.1 6.9
AV:L/AC:L/Au:S/C:N/I:N/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4081
Vendor Advisory
http://www.securitytracker.com/id/1029065
Third Party Advisory
VDB Entry