Field Assessment
AI analysis pending.
CVE
CVE-2012-4072
Severity
MEDIUM
CVSS
4.3
EPSS
0.61%
Cisco
Original Filing — NVD Description
The KVM subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers, and read keyboard and mouse events, by leveraging knowledge of this certificate's private key, aka Bug ID CSCte90327.