CVE-2012-1843

no score yetEPSS 1.0%

Cross-site request forgery (CSRF) vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to hijack the authentication of users for requests that execute Linux commands via the fileName parameter, related to a "command-injection vulnerability."

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2012-03-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

dell:powervault_ml6000
dell:powervault_ml6000_firmware
dell:powervault_ml6010
dell:powervault_ml6020
dell:powervault_ml6030
quantum:scalar_i500
quantum:scalar_i500_firmware

References

http://osvdb.org/80227
http://secunia.com/advisories/48403
http://secunia.com/advisories/48453
http://www.kb.cert.org/vuls/id/913483
http://www.kb.cert.org/vuls/id/MAPG-8NNKN8

Check your stack JSON