CVE-2014-2959: Dell Powervault ML6000

High severity, CVSS 9.0. EPSS: 3% chance of exploitation in the next 30 days.

logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 (641G.GS103) and the Quantum Scalar i500 tape backup system with firmware before i8.2.2.1 (646G.GS002) allows remote attackers to execute arbitrary commands via shell metacharacters in a pathname parameter.

Affected products

• Dell Powervault ML6000
• Dell Powervault ML6000 Firmware: up to and including i8.2.0.1_\(641g.gs003\)
• Quantum Scalar i500
• Quantum Scalar i500 Firmware: up to and including i8.2.2.1_\(646g.gs002\)

Published 2014-06-02. Last modified 2026-06-17.