packetstormsecurity.com
http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html CVE-2014-3085
IBM GCM16/32 1.20.0.22575 - Multiple Vulnerabilities
Record summary
CVE-2014-3085 has a selected CVSS score of 7.1; EIP currently links 1 catalogued exploit.
Description
systest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the lpres parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBIBM GCM16/32 1.20.0.22575 - Multiple VulnerabilitiesExploitDB exploitby Alejandro Alvarez BravoNot analyzed1 file
References
534132exploit
http://www.exploit-db.com/exploits/34132 ibm.comConfirmation
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983 ibm-gcm-cve20143085-rce(94091)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/94091 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2014-3085