Path Traversal in Cisco Unified Computing System

CVE-2012-4104

Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to overwrite or delete arbitrary files via a full pathname in an image header, aka Bug ID CSCtq02706.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.004 (27.8th percentile) — read the EPSS interpretation.