CVE-2012-4116: The fabric-interconnect component in Cisco Unified Computing System (UCS) does not encrypt KVM media traffi...

Security readout for executives and security teams

Cisco UCS Fabric Interconnect exposed KVM media traffic without encryption. If that traffic crossed a network an attacker could observe, sensitive data could be exposed and may help complete server connection authentication. The provided sources do not name active exploitation, affected versions, or a specific fixed release. Likely limited to environments running Cisco Unified Computing System with Fabric Interconnect and KVM media traffic paths. Exposure depends on whether that traffic is reachable or observable from shared, untrusted, or compromised network segments. Prioritize review where Cisco UCS management networks are shared or weakly segmented. The business risk is exposure of sensitive management-session data, but urgency is reduced by incomplete version, severity, and exploitation evidence in the provided sources. Mitigation focus: Review Cisco guidance for CVE-2012-4116 and Bug ID CSCtr72970 applicability.; Restrict KVM media traffic to trusted management networks.; Segment Cisco UCS management paths from user and guest networks..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.