CVE-2012-4110: run-script in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users...

Security readout for executives and security teams

CVE-2012-4110 is a Cisco UCS Fabric Interconnect issue where a local user could gain higher privileges through command injection in the run-script function. The provided sources do not include affected versions, CVSS scoring, or named fixes, so urgency depends on whether this legacy Cisco UCS component is present and still accessible. Exposure is most likely in environments running Cisco UCS Fabric Interconnects where local users can access the run-script functionality. The source bundle does not identify affected versions, configurations, or CPEs, so asset inventory is required before assigning business risk. Treat this as a targeted legacy infrastructure risk until inventory confirms exposure. It is not supported as actively exploited by the supplied evidence, but privilege escalation on UCS management infrastructure can affect critical compute operations. Mitigation focus: Check Cisco’s advisory for affected UCS versions and official remediation guidance.; Inventory Cisco UCS Fabric Interconnect deployments and firmware/software versions.; Restrict local administrative access to trusted users only..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.