CVE-2014-3081

EUVD-2014-3102
prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to read arbitrary files via the filename parameter.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:C/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
Affected Products (NVD)
VendorProductVersion
ibmglobal_console_manager_16_firmware
𝑥
≤ 1.20.0.22575
ibmglobal_console_manager_32_firmware
𝑥
≤ 1.20.0.22575
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html
http://seclists.org/fulldisclosure/2014/Jul/113
http://www.exploit-db.com/exploits/34132/
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983
https://exchange.xforce.ibmcloud.com/vulnerabilities/93930
http://packetstormsecurity.com/files/127543/IBM-1754-GCM-KVM-Code-Execution-File-Read-XSS.html
http://seclists.org/fulldisclosure/2014/Jul/113
http://www.exploit-db.com/exploits/34132/
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095983
https://exchange.xforce.ibmcloud.com/vulnerabilities/93930