{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T11:05:13Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20130927-CVE-2012-4092","slug":"cisco-sa-20130927-cve-2012-4092","vendor":"Cisco","title":"Cisco Unified Computing System Fabric System Manager Man-in-the-Middle Vulnerability ","summary":"A vulnerability in the management interface of the Cisco Unified Computing System could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack. The vulnerability is due to improper identity validation of vCenter management consoles. An attacker could exploit this vulnerability by spoofing their identity and inserting themselves between the vCenter console and the Cisco Unified Computing System Manager. A successful exploit will allow the attacker to collect and modify data sent between the devices. Cisco has confirmed the vulnerability in a security notice; however, software updates are not available. To exploit this vulnerability, an attacker must be able to conduct a spoofing attack against the vCenter console to obtain the identity of the console. In addition, it is likely that an attacker would need access to trusted internal networks to be positioned between the vCenter console and an affected device. These conditions make it unlikely for an attacker to achieve a successful exploit. Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.","severity":"Medium","published_at":"2013-09-27T02:24:20Z","updated_at":"2013-09-27T02:24:20Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20130927-CVE-2012-4092","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20130927-CVE-2012-4092/csaf/Cisco-SA-20130927-CVE-2012-4092.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0,"highest_epss":0.00839},"cves":[{"id":"CVE-2012-4092","kev":false,"epss":{"score":0.00839,"percentile":0.53787,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco Unified Computing System (Managed)","slug":"cisco-unified-computing-system-managed","vendor":"Cisco"},"cve":{"id":"CVE-2012-4092"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:15:16Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified Computing System (Managed)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00839,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2013-09-27T02:24:20Z","updated_at":"2013-09-27T02:24:20Z","advisory_updated_at":"2013-09-27T02:24:20Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20130927-CVE-2012-4092","row_display_order":1}]}