Lucene search

PRIOn knowledge basePRION:CVE-2014-2959

HistoryJun 02, 2014 - 7:55 p.m.

Code injection

2014-06-0219:55:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:C/I:P/A:P

0.004 Low

EPSS

Percentile

74.9%

JSON

logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 (641G.GS103) and the Quantum Scalar i500 tape backup system with firmware before i8.2.2.1 (646G.GS002) allows remote attackers to execute arbitrary commands via shell metacharacters in a pathname parameter.

CPENameOperatorVersion
powervault_ml6000eq32.0.117
powervault_ml6000eq41.0.117
powervault_ml6000_firmwareeq<= i8.2.0.1-641g.gs3
scalar_i500eq5.0.117
scalar_i500eq14.0.117
scalar_i500eq23.0.117
scalar_i500_firmwareeq<= i8.2.2.1-646g.gs2

Name	Operator	Version
powervault_ml6000	eq	32.0.117
powervault_ml6000	eq	41.0.117
powervault_ml6000_firmware	eq	<= i8.2.0.1-641g.gs3
scalar_i500	eq	5.0.117
scalar_i500	eq	14.0.117
scalar_i500	eq	23.0.117
scalar_i500_firmware	eq	<= i8.2.2.1-646g.gs2

References

secunia.com/advisories/59019

www.kb.cert.org/vuls/id/124908

www.securityfocus.com/bid/67751

8.3 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:C/I:P/A:P

0.004 Low

EPSS

Percentile

74.9%

JSON

Related for PRION:CVE-2014-2959