Every CVESearch/Get API key

CVE-2012-4089

MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to...

6.6 Medium

CVE-2012-4089 is a medium vulnerability (CVSS 6.6) in Cisco Unified Computing System, published September 24, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 25th percentile. No source names a fixed version.

What does this mean?
Severity
6.6 MediumCVSS 2.0, NVD
Exploit chance
0.32%EPSS, 25th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to execute arbitrary Baseboard Management Controller (BMC) commands by leveraging (1) local, (2) shell-level, or (3) debug-level privileges at the operating-system layer, aka Bug ID CSCtg76239.

Exploit likelihood

0.32%Down 0.6 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used6.6

MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to execute arbitrary Baseboard Management Controller (BMC) commands by leveraging (1) local, (2) shell-level, or (3) debug-level privileges at the operating-system layer, aka Bug ID CSCtg76239.

Record
CVE-2012-4089
CVSS 2.0
6.6 MediumAV:L/AC:M/Au:S/C:C/I:C/A:C
Weakness
CWE-20
Updated
2026-11-02
CVE ListNo score

MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to execute arbitrary Baseboard Management Controller (BMC) commands by leveraging (1) local, (2) shell-level, or (3) debug-level privileges at the operating-system layer, aka Bug ID CSCtg76239.

Record
CVE-2012-4089
Updated
2026-11-02
EUVDEUVD-2012-4033No score

MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to execute arbitrary Baseboard Management Controller (BMC) commands by leveraging (1) local, (2) shell-level, or (3) debug-level privileges at the operating-system layer, aka Bug ID CSCtg76239.

Record
EUVD-2012-4033
Updated
2026-11-03
GitHub AdvisoriesGHSA-3w6q-chqr-4j8jNo score

MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to...

MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to execute arbitrary Baseboard Management Controller (BMC) commands by leveraging (1) local, (2) shell-level, or (3) debug-level privileges at the operating-system layer, aka Bug ID CSCtg76239.

Record
GHSA-3w6q-chqr-4j8j
Weakness
CWE-20
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open