high7.1Public exploit code
CVE-2014-3085
systest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to execute arbitrary co…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM GCM16/32 1.20.0.22575 - Multiple Vulnerabilities2014-07-21 · remote · php · Verified
Impact
systest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the lpres parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Global Console Manager 16 Firmware | through 1.20.0.22575 |
| Ibm | Global Console Manager 32 Firmware | through 1.20.0.22575 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html
- http://www.exploit-db.com/exploits/34132/
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94091
- http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html
- http://www.exploit-db.com/exploits/34132/
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94091