NetSight
high7.5

CVE-2012-1844

The Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (…

Impact

The Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100) and the IBM TS3310 tape library with firmware before R6C (606G.GS001), uses default passwords for unspecified user accounts, which makes it easier for remote attackers to obtain access via unknown vectors.

Affected products

VendorProductAffected versions
QuantumScalar I500 Firmware
through i7.0.2
Versions i2, i3, i3.1, i4, i5
QuantumScalar I500
Versions 5u, 14u, 23u
DellPowervault Ml6000 Firmware
Version 585g.gs003
DellPowervault Ml6000
Versions 32u, 41u
DellPowervault Ml6010
Version 5u
DellPowervault Ml6020
Version 14u
DellPowervault Ml6030
Version 23u
IbmTs3310 Tape Library Firmware
through 605g.g002
IbmTs3310 Tape Library
Versions 3573, 3576

Weakness classification

References