CVE-2016-1404

Cisco UCS Invicta 4.3, 4.5, and 5.0.1 on Invicta appliances and Invicta Scaling System uses the same hardcoded GnuPG encryption key across different customers'…

published May 29, 2016

CVSS
—
EPSS
1%
Percentile
66.0
In the wild
Unconfirmed
What it is

Cisco UCS Invicta 4.3, 4.5, and 5.0.1 on Invicta appliances and Invicta Scaling System uses the same hardcoded GnuPG encryption key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by sniffing network traffic to an Autosupport server and leveraging knowledge of this key from another installation, aka Bug ID CSCur85504.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01135 · 66.0th percentile
Published
2016-05-29T22:00Z
EPSS history
Timeline
  • 29 MAY 22:00Z
    Cisco UCS Invicta 4.3, 4.5, and 5.0.1 on Invicta appliances and Invicta Scaling System uses the same hardcoded GnuPG encryption key across different customers'…
    cvelistv5