CVE-2014-2959

The CVE-2014-2959 issue affects Dell ML6000 and Quantum Scalar i500 tape libraries. The remote pre-authentication vulnerability stems from logViewer.htm, where a pathname parameter is used directly in shell commands, allowing command execution via metacharacters. Affected firmwares are Dell i8.2....

CVE-2012-1842

CVE-2012-1842 affects Quantum Scalar i500 (and rebranded/Dell ML6000, IBM TS3310) web interface. The vulnerability is a cross-site scripting flaw in checkQKMProg.htm that allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Affected firmware versions: Quantum i500 befo...

CVE-2012-1841

CVE-2012-1841 describes an absolute path traversal vulnerability in logShow.htm on Quantum Scalar i500 tape library (firmware before i7.0.3, 604G.GS00100) and the Dell ML6000 equivalent (firmware before A20-00, 590G.GS00100). The issue allows remote attackers to read arbitrary files by supplying ...

CVE-2012-1844

CVE-2012-1844 affects Quantum Scalar i500, Dell ML6000, and IBM TS3310 tape libraries. Firmware before i7.0.3 (604G.GS00100) for i500, before A20-00 (590G.GS00100) for ML6000, and before R6C (606G.GS001) for TS3310 contains pre-configured default accounts with fixed passwords, enabling remote acc...

CVE-2012-1843

The CVE-2012-1843 issue affects Quantum Scalar i500 (and rebranded Dell ML6000/IBM TS3310) web interface: a CSRF in saveRestore.htm allows an authenticated remote user to cause execution of Linux commands via the fileName parameter, effectively hijacking user authentication and potentially runnin...