CVEvulnerability
CVE-2013-0526
8.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-08-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
ping.php in Global Console Manager 16 (GCM16) and Global Console Manager 32 (GCM32) before 1.20.0.22575 on the IBM Avocent 1754 KVM switch allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) count or (2) size parameter.
Affected configurations
• ibm global console manager 16 firmware (<= 1.18.0.22011)
• ibm global console manager 32 firmware (<= 1.18.0.22011)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.bitcloud.es/2013/08/vulnerabilidad-en-kvms-gcm1632-de-ibm.html www.bitcloud.es
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093509 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85367 exchange.xforce.ibmcloud.com
- http://www.bitcloud.es/2013/08/vulnerabilidad-en-kvms-gcm1632-de-ibm.html www.bitcloud.es
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093509 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85367 exchange.xforce.ibmcloud.com