CVE-2012-4104: Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in...

Security readout for executives and security teams

A flaw in Cisco UCS Fabric Interconnect image download handling could let a local user use a full pathname in an image header to overwrite or delete arbitrary files. That can threaten UCS management integrity and availability, but the provided sources do not identify affected versions, CVSS severity, or active exploitation. Exposure is most likely where Cisco UCS Fabric Interconnect is deployed and local users can initiate or influence image-download workflows. The provided affected-product fields are incomplete, so version-specific exposure must be verified against Cisco guidance. Treat as a targeted infrastructure risk rather than a broad internet emergency. Prioritize validation in environments using Cisco UCS Fabric Interconnect, especially where multiple administrators or delegated local users can manage images. Mitigation focus: Check the Cisco security notice for affected versions and fixed software guidance.; Restrict local administrative access to Cisco UCS Fabric Interconnect systems.; Review who can perform image-download or firmware image management operations..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.