PatchTheCVEscalar i500 firmware vulnerabilities and fixes
Recent CVEs affecting scalar i500 firmware, with upgrade or downgrade steps. 5 tracked.
Also searched as: scalari500firmware.
scalar i500 firmware has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2014-06-02. Highest priority: CVE-2014-2959 (score 53/100).
- CVE-2014-2959 HIGH 9.0 MITIGATE MITIGATE logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 (641G.GS103) and the Quantum
- CVE-2012-1844 HIGH 7.5 UPGRADE MITIGATE The Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell
- CVE-2012-1843 MEDIUM 6.0 UPGRADE MITIGATE Cross-site request forgery (CSRF) vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library wit
- CVE-2012-1842 LOW 3.5 UPGRADE MITIGATE Cross-site scripting (XSS) vulnerability in checkQKMProg.htm on the Quantum Scalar i500 tape library with firm
- CVE-2012-1841 MEDIUM 5.0 UPGRADE MITIGATE Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware bef
FAQ
How do I fix scalar i500 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is scalar i500 firmware being exploited right now?
None of the tracked scalar i500 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which scalar i500 firmware CVE should I patch first?
CVE-2014-2959 currently ranks highest (53/100): logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 (641G.GS103) and the Quantum.