IBM Dell and other server management system to save significant vulnerability-vulnerability warning-the black bar safety net

Previously a security researcher found that IBM, Dell and other brands of some products the presence of the vulnerability, the vulnerability could theoretically be used by hackers to get on victims of the user equipment system of control. IBM has for the vulnerability is released the relevant...

Dominion KX2-101 vulnerable to denial-of-service (DoS)

Overview Dominion KX2-101 provided by Raritan Japan, Inc. contains a denial-of-service DoS vulnerability. Dominion KX2-101 provided by Raritan Japan, Inc. is a KVM-over-IP switch. Dominion KX2-101 contains a denial-of-service DoS vulnerability. Yusuke Okano reported this vulnerability to IPA...

IBM GCM16 / GCM32 Global Console Manager KVM Switch Detection

Binary data ibmgcmkvmdetect.nbin...

IBM GCM16 / GCM32 Global Console Manager KVM Switch Firmware Version < 1.20.20.23447 Multiple Vulnerabilities

According to its self-reported version, the remote host is an IBM Global Console Manager KVM switch with a firmware version prior to 1.20.20.23447. It is, therefore, affected by the following vulnerabilities : - A reflected cross-site scripting attack via 'kvm.cgi' or 'avctalert.php'. CVE-2014-30...

IBM GCM16 / GCM32 Global Console Manager KVM Switch Firmware Version < 1.20.0.22575 Remote Code Execution

According to its self-reported version, the remote host is an IBM Global Console Manager KVM switch with a firmware version prior to 1.20.0.22575. It is, therefore, affected by a remote code execution vulnerability that could allow an authenticated attacker to execute commands as root via the...

IBM GCM16/32 1.20.0.22575 - 多个漏洞

No description provided by source. Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. Versions v1.20.0.22575 and prior are vulnerables. Note that this vulnerability is also present in some DELL and probably other vendor...

IBM GCM16/32 1.20.0.22575 - Multiple Vulnerabilities

Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. Versions v1.20.0.22575 and prior are vulnerables. Note that this vulnerability is also present in some DELL and probably other vendors of this rebranded KVM. I contacte...

IBM 1754 GCM 1.18.0.22011 - Remote Command Execution

No description provided by source. I. Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. II. Vulnerability information Impact: Command execution Remotely exploitable: yes CVE: 2013-0526 CVS Score: 8.5 III. Vulnerability...

Emerson Network Power Avocent MergePoint Unity KVM Switch Detection

Binary data emersonmpukvmdetect.nbin...

Emerson Network Power Avocent MergePoint Unity KVM Switch < 1.14 / 1.18 download.php filename Parameter Directory Traversal

The remote host is an Emerson Network Power Avocent MergePoint Unity KVM Switch with a firmware version prior to 1.14 or 1.18. It is, therefore, affected by a directory traversal vulnerability due to a failure to sanitize user-supplied input to the 'filename' parameter of the 'download.php' scrip...

CVE-2013-6030

Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 aka MPU2016 KVM switch with firmware 1.9.16473 allows remote attackers to read arbitrary files via unspecified vectors, as demonstrated by reading the /etc/passwd file...

Directory traversal

Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 aka MPU2016 KVM switch with firmware 1.9.16473 allows remote attackers to read arbitrary files via unspecified vectors, as demonstrated by reading the /etc/passwd file...

CVE-2013-6030

Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 aka MPU2016 KVM switch with firmware 1.9.16473 allows remote attackers to read arbitrary files via unspecified vectors, as demonstrated by reading the /etc/passwd file...

CVE-2013-6030

CVE-2013-6030 affects the Emerson Network Power Avocent MergePoint Unity 2016 KVM Switch (MPU2016). A directory traversal vulnerability exists in the download.php handler due to insufficient sanitization of the filename parameter, enabling reading of arbitrary files (e.g., “/etc/passwd”). Affecte...

Code injection

ping.php in Global Console Manager 16 GCM16 and Global Console Manager 32 GCM32 before 1.20.0.22575 on the IBM Avocent 1754 KVM switch allows remote authenticated users to execute arbitrary commands via shell metacharacters in the 1 count or 2 size parameter...

CVE-2013-0526

The CVE-2013-0526 entry details a remote code execution vulnerability in IBM 1754 GCM16/GCM32 KVM switches (firmware

IBM 1754 GCM 1.18.0.22011 - Remote Command Execution

IBM 1754 GCM 1.18.0.22011 - Remote Command Execution I. Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. II. Vulnerability information Impact: Command execution Remotely exploitable: yes CVE: 2013-0526 CVS Score: 8.5...

IBM 1754 GCM 1.18.0.22011 - Remote Command Execution

I. Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. II. Vulnerability information Impact: Command execution Remotely exploitable: yes CVE: 2013-0526 CVS Score: 8.5 III. Vulnerability details GCM16 v.1.18.0.22011 and...

IBM 1754 GCM16 1.18.0.22011 Command Execution

I. Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. II. Vulnerability information Impact: Command execution Remotely exploitable: yes CVE: 2013-0526 CVS Score: 8.5 III. Vulnerability details GCM16 v.1.18.0.22011 and...

CVE-2009-1474

The ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not 1 encrypt mouse events, which makes it easier for man-in-the-middle attackers to perform mouse operations on machines connected to the switch by injecting network traffic; and do not 2 s...