Emerson Network Power Avocent MergePoint Unity 2016 KVM and possibly other model switches contain a directory traversal vulnerability

Overview Emerson Network Power Avocent MergePoint Unity 2016 KVM and possibly other model switches running firmware version 1.9.16473 and possibly previous versions contain a directory traversal vulnerability CWE-23. Description CWE-23: Relative Path Traversal Emerson Network Power Avocent...

Code injection

ping.php in Global Console Manager 16 GCM16 and Global Console Manager 32 GCM32 before 1.20.0.22575 on the IBM Avocent 1754 KVM switch allows remote authenticated users to execute arbitrary commands via shell metacharacters in the 1 count or 2 size parameter...

CVE-2013-0526

The CVE-2013-0526 entry details a remote code execution vulnerability in IBM 1754 GCM16/GCM32 KVM switches (firmware

CVE-2013-0526

ping.php in Global Console Manager 16 GCM16 and Global Console Manager 32 GCM32 before 1.20.0.22575 on the IBM Avocent 1754 KVM switch allows remote authenticated users to execute arbitrary commands via shell metacharacters in the 1 count or 2 size parameter...

Avocent KVM Default Credentials (HTTP)

The remote Avocent KVM is using known default credentials. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Avocent KVM Over IP Switch Detection

The remote host is an Avocent KVM over IP switch that provides for control of connected servers and devices. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29923; scriptversion"1.12"; scriptnameenglish:"Avocent KVM Over IP Switch Detection"; scriptsummaryenglish:"Loo...

Avocent DSView Server Detection

Binary data 4252.prm...

Avocent KVM Appliance Detection

Binary data 4244.prm...

CVE-2005-2984

Avocent CCM console server running firmware 2.1 CCM4850 allows remote authenticated attackers to bypass port restrictions by connecting to the server via SSH and using the connect command to access the serial port...

CVE-2005-2984

Avocent CCM console server running firmware 2.1 CCM4850 allows remote authenticated attackers to bypass port restrictions by connecting to the server via SSH and using the connect command to access the serial port...

CVE-2005-2984

CVE-2005-2984 affects Avocent CCM console server (firmware 2.1 CCM4850). The issue allows bypassing port restrictions by connecting to the server via SSH and using the connect command to access the serial port. CVSS 2.0 base score 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P). Practical impact is partial conf...

Avocent CCM: Port Access Control Bypass Vulnerability

Hi, this is another bug I found during my research on console servers which is presumably fixed by now. So here you go: Summary: Port Access Control Bypass Vulnerability Details: Avocents CCM console server have a flaw which enables users to bypass access control by using ssh with standard passwo...