CVE-2012-1843: Dell Powervault ML6000

Medium severity, CVSS 6.0. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to hijack the authentication of users for requests that execute Linux commands via the fileName parameter, related to a "command-injection vulnerability."

Affected products

• Dell Powervault ML6000
• Dell Powervault ML6000 Firmware: version 585g.gs003 only
• Dell Powervault ML6010
• Dell Powervault ML6020
• Dell Powervault ML6030
• Quantum Scalar i500
• Quantum Scalar i500 Firmware: up to and including i7.0.2; version i2 only; version i3 only; version i3.1 only; version i4 only; version i5 only; …

Published 2012-03-22. Last modified 2026-06-16.