CVE-2013-0526

Severity: high (CVSS 8.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-08-21 · updated 2026-06-16
Weakness: CWE-20

Description

ping.php in Global Console Manager 16 (GCM16) and Global Console Manager 32 (GCM32) before 1.20.0.22575 on the IBM Avocent 1754 KVM switch allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) count or (2) size parameter.

Affected products

IBM Global Console Manager 16 Firmware: through 1.18.0.22011
IBM Global Console Manager 32 Firmware: through 1.18.0.22011

References

http://www.bitcloud.es/2013/08/vulnerabilidad-en-kvms-gcm1632-de-ibm.html
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093509
https://exchange.xforce.ibmcloud.com/vulnerabilities/85367
http://www.bitcloud.es/2013/08/vulnerabilidad-en-kvms-gcm1632-de-ibm.html
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093509
https://exchange.xforce.ibmcloud.com/vulnerabilities/85367

Get alerted when CVE-2013-0526 or the next vulnerability affects your stack