CVEvulnerability
CVE-2014-3085
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-08-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:H/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-78
Description
systest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the lpres parameter.
Affected configurations
• ibm global console manager 16 firmware (<= 1.20.0.22575)
• ibm global console manager 32 firmware (<= 1.20.0.22575)
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html Exploit
- http://www.exploit-db.com/exploits/34132/ Exploit
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94091 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html Exploit
- http://www.exploit-db.com/exploits/34132/ Exploit
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94091 exchange.xforce.ibmcloud.com