Code injection

2014-06-0219:55:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.9%

JSON

logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 (641G.GS103) and the Quantum Scalar i500 tape backup system with firmware before i8.2.2.1 (646G.GS002) allows remote attackers to execute arbitrary commands via shell metacharacters in a pathname parameter.

CPENameOperatorVersion
powervault_ml6000eq32.0.117
powervault_ml6000eq41.0.117
powervault_ml6000_firmwareeq<= i8.2.0.1-641g.gs3
scalar_i500eq5.0.117
scalar_i500eq14.0.117
scalar_i500eq23.0.117
scalar_i500_firmwareeq<= i8.2.2.1-646g.gs2

Name	Operator	Version
powervault_ml6000	eq	32.0.117
powervault_ml6000	eq	41.0.117
powervault_ml6000_firmware	eq	<= i8.2.0.1-641g.gs3
scalar_i500	eq	5.0.117
scalar_i500	eq	14.0.117
scalar_i500	eq	23.0.117
scalar_i500_firmware	eq	<= i8.2.2.1-646g.gs2