VULNERABILITY INTELLIGENCE

CVE-2014-2959

CVSS score9 HIGH
EPSS probability2.96%
CISA KEVNot currently listed
Published2014-06-02
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:P/A:P

Description

logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 (641G.GS103) and the Quantum Scalar i500 tape backup system with firmware before i8.2.2.1 (646G.GS002) allows remote attackers to execute arbitrary commands via shell metacharacters in a pathname parameter.

Weakness classification

  • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Primary references