CVE-2013-0526

2013-08-2116:55:07

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.022

Percentile

89.8%

JSON

ping.php in Global Console Manager 16 (GCM16) and Global Console Manager 32 (GCM32) before 1.20.0.22575 on the IBM Avocent 1754 KVM switch allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) count or (2) size parameter.

Affected configurations

Nvd

Node

ibmglobal_console_manager_16_firmwareRange≤1.18.0.22011

ibmglobal_console_manager_32_firmwareRange≤1.18.0.22011

AND

ibmavocent_1754_kvmMatch-

VendorProductVersionCPE
ibmglobal_console_manager_16_firmware*cpe:2.3:o:ibm:global_console_manager_16_firmware:*:*:*:*:*:*:*:*
ibmglobal_console_manager_32_firmware*cpe:2.3:o:ibm:global_console_manager_32_firmware:*:*:*:*:*:*:*:*
ibmavocent_1754_kvm-cpe:2.3:h:ibm:avocent_1754_kvm:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	global_console_manager_16_firmware	*	cpe:2.3:o:ibm:global_console_manager_16_firmware::::::::
ibm	global_console_manager_32_firmware	*	cpe:2.3:o:ibm:global_console_manager_32_firmware::::::::
ibm	avocent_1754_kvm	-	cpe:2.3:h:ibm:avocent_1754_kvm:-:::::::*