VulnerabilityModified

CVE-2012-1844

HIGH 7.5EPSS 3.46%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (3.46%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

The Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100) and the IBM TS3310 tape library with firmware before R6C (606G.GS001), uses default passwords for unspecified user accounts, which makes it easier for remote attackers to obtain access via unknown vectors.

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 3.46% probability · 88th percentile
CISA KEV: Not listed
Weakness: CWE-255
Affected: quantum/scalar i500 firmware · quantum/scalar i500 · dell/powervault ml6000 firmware · dell/powervault ml6000 · dell/powervault ml6010 · dell/powervault ml6020 · dell/powervault ml6030 · ibm/ts3310 tape library firmware · ibm/ts3310 tape library
Source: cve@mitre.org

References

http://osvdb.org/80372
http://www.kb.cert.org/vuls/id/913483US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-8NNKN8US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-8NVRPYUS Government Resource
http://www.kb.cert.org/vuls/id/MORO-8QNJLEUS Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/74322
http://osvdb.org/80372
http://www.kb.cert.org/vuls/id/913483US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-8NNKN8US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-8NVRPYUS Government Resource
http://www.kb.cert.org/vuls/id/MORO-8QNJLEUS Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/74322

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.