Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
systest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the lpres parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM 1754 GCM16和GCM32 Global Console Managers 安全漏洞
Vulnerability Description
IBM 1754 GCM16和GCM32 Global Console Managers（GCM）都是美国IBM公司的1754系列KVM切换器产品。该产品支持AES加密、LDAP和智能卡/通用访问卡（CAC）读取器等，可实现集中式身份验证和本地或远程系统访问。 使用1.20.20.23447之前版本固件的IBM 1754 GCM16和GCM32 GCM交换机的systest.php脚本中存在安全漏洞。远程攻击者可通过’lpres‘参数中的shell元字符利用该漏洞执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A