VYPR
Unrated severityNVD Advisory· Published Jun 2, 2014· Updated May 6, 2026

CVE-2014-2959

CVE-2014-2959

Description

logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 (641G.GS103) and the Quantum Scalar i500 tape backup system with firmware before i8.2.2.1 (646G.GS002) allows remote attackers to execute arbitrary commands via shell metacharacters in a pathname parameter.

Affected products

7
  • cpe:2.3:h:dell:powervault_ml6000:32u:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:dell:powervault_ml6000:32u:*:*:*:*:*:*:*
    • cpe:2.3:h:dell:powervault_ml6000:41u:*:*:*:*:*:*:*
  • cpe:2.3:h:quantum:scalar_i500:14u:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:h:quantum:scalar_i500:14u:*:*:*:*:*:*:*
    • cpe:2.3:h:quantum:scalar_i500:23u:*:*:*:*:*:*:*
    • cpe:2.3:h:quantum:scalar_i500:5u:*:*:*:*:*:*:*
  • cpe:2.3:o:dell:powervault_ml6000_firmware:*:*:*:*:*:*:*:*
    Range: <=i8.2.0.1_\(641g.gs003\)
  • cpe:2.3:o:quantum:scalar_i500_firmware:*:*:*:*:*:*:*:*
    Range: <=i8.2.2.1_\(646g.gs002\)

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.