CVE-2016-1404: Cisco UCS Invicta 4.3, 4.5, and 5.0.1 on Invicta appliances and Invicta Scaling System uses the same hardco...

Security readout for executives and security teams

Cisco UCS Invicta used the same GnuPG encryption key across customer installations. If an attacker could monitor traffic sent to an Autosupport server and knew the shared key from another installation, protected support data could be exposed. The source bundle does not provide a CVSS score or evidence of active exploitation. Exposure is likely limited to organizations still running legacy Cisco UCS Invicta appliances or Invicta Scaling System versions 4.3, 4.5, or 5.0.1, especially where Autosupport traffic traversed networks an attacker could observe. Treat this as a targeted legacy-infrastructure confidentiality risk, not an internet-wide emergency. Prioritize inventory and vendor-guided remediation if Cisco UCS Invicta remains in use or stored sensitive operational data in Autosupport workflows. Mitigation focus: Inventory Cisco UCS Invicta appliances and Scaling System deployments.; Check Cisco advisory cisco-sa-20160524-ucs-inv for vendor-supported remediation.; Engage Cisco support if affected appliances remain in production..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.