What is CVE-2012-4094?

CVE-2012-4094 is a vulnerability in Cisco Unified Computing System, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2013-09-24.

Is CVE-2012-4094 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Cisco Unified Computing System

CVE-2012-4094

Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System (UCS) allows remote attackers to cause a denial of service by reading and forging control messages associated with Smart Call Home reports, aka Bug ID CSCtl00198.

Vulnerability class: Buffer Overflow

EPSS: 0.020 (79.2th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_computing_system
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

uztra4/CE4010-Applied-Cryptography

References

psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2012-4094?: CVE-2012-4094 is a vulnerability in Cisco Unified Computing System, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2013-09-24.
Is CVE-2012-4094 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.