CVE-2012-4117: The fabric-interconnect component in Cisco Unified Computing System (UCS) does not properly verify X.509 ce...

Security readout for executives and security teams

This flaw affects Cisco UCS fabric interconnect handling of SSL KVM video-channel certificates. If an attacker can sit between an administrator and the KVM channel, they may view or alter that traffic using a crafted certificate. The source bundle does not identify specific affected versions, fixed releases, or confirmed exploitation. Exposure is most likely in Cisco UCS environments using fabric interconnects and SSL KVM access, especially where management or KVM paths cross networks an attacker could intercept. The provided sources do not list affected versions or CPEs. Treat this as a management-plane confidentiality and integrity risk for legacy Cisco UCS estates. Prioritize validation if UCS KVM access is still used or reachable beyond tightly controlled admin networks. Urgency is lower without active exploitation evidence, but incomplete version and fix data require vendor verification. Mitigation focus: Review Cisco Security Notice CVE-2012-4117 for affected releases and official remediation.; Inventory Cisco UCS fabric interconnect deployments and SSL KVM usage.; Restrict UCS management and KVM access to trusted administrative networks..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.