CVE-2014-2959

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-06-02 · updated 2026-06-17
Weakness: CWE-78

Description

logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 (641G.GS103) and the Quantum Scalar i500 tape backup system with firmware before i8.2.2.1 (646G.GS002) allows remote attackers to execute arbitrary commands via shell metacharacters in a pathname parameter.

Affected products

Dell Powervault Ml6000: 32u, 41u
Dell Powervault Ml6000 Firmware: through i8.2.0.1_\(641g.gs003\)
Quantum Scalar I500: 5u, 14u, 23u
Quantum Scalar I500 Firmware: through i8.2.2.1_\(646g.gs002\)

References

http://secunia.com/advisories/59019
http://www.kb.cert.org/vuls/id/124908
http://www.securityfocus.com/bid/67751
http://secunia.com/advisories/59019
http://www.kb.cert.org/vuls/id/124908
http://www.securityfocus.com/bid/67751

Get alerted when CVE-2014-2959 or the next vulnerability affects your stack