Skip to content

CVE-2014-2959 logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 (641G.GS103) and the Quantum Scalar i500 tape backup system with firmware before i8.2.2.1 (646G.GS002) allows remote a...

HighCVSS 9.0 EPSS 3.0%
Published
Updated
Exploit status
No public exploit known

Description

logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 (641G.GS103) and the Quantum Scalar i500 tape backup system with firmware before i8.2.2.1 (646G.GS002) allows remote attackers to execute arbitrary commands via shell metacharacters in a pathname parameter.

Affected products

ProductAffected versionsFixed in
Dell powervault ml6000 firmware <= i8.2.0.1_\(641g.gs003\) No fix listed
Dell powervault ml6000 = 32u No fix listed
Dell powervault ml6000 = 41u No fix listed
quantum scalar i500 firmware <= i8.2.2.1_\(646g.gs002\) No fix listed
quantum scalar i500 = 5u No fix listed
quantum scalar i500 = 14u No fix listed
quantum scalar i500 = 23u No fix listed

References

  • 59019 third-party-advisory
  • VU#124908 third-party-advisory us-government-resource
  • 67751 vdb-entry