Published: 17/08/2014 Updated: 29/08/2017

CVSS v2 Base Score: 7.1 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 715

Vector: AV:N/AC:H/Au:S/C:C/I:C/A:C

systest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware prior to 1.20.20.23447 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the lpres parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ibm global console manager 16 firmware
ibm global console manager 32 firmware

*Product description* The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance Versions v120022575 and prior are vulnerables Note that this vulnerability is also present in some DELL and probably other vendors of this rebranded KVM I contacted Dell but no response has been received *1 ...

CWE-78 http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983 http://www.exploit-db.com/exploits/34132/http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html https://exchange.xforce.ibmcloud.com/vulnerabilities/94091 https://nvd.nist.gov https://www.exploit-db.com/exploits/34132/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-3085

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect