CVE-2012-1844

high
Published 2012-03-22 · Modified 2026-04-29
CVSS v3
CVSS v2
7.5
VIR risk
7.5

Description

The Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100) and the IBM TS3310 tape library with firmware before R6C (606G.GS001), uses default passwords for unspecified user accounts, which makes it easier for remote attackers to obtain access via unknown vectors.

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Application impact

VendorProductVersionsFixed
quantumscalar_i500_firmware{"endIncluding":"i7.0.2"}
quantumscalar_i500_firmwarei2
quantumscalar_i500_firmwarei3
quantumscalar_i500_firmwarei3.1
quantumscalar_i500_firmwarei4
quantumscalar_i500_firmwarei5
quantumscalar_i500_firmwarei5.1
quantumscalar_i500_firmwarei6
quantumscalar_i500_firmwarei6.1
quantumscalar_i500_firmwarei7
quantumscalar_i500_firmwarei7.0.1
quantumscalar_i500_firmwaresp4
quantumscalar_i500_firmwaresp4.2
dell dellpowervault_ml6000_firmware585g.gs003
ibm ibmts3310_tape_library_firmware{"endIncluding":"605g.g002"}

References

CWEs

CWE-255

Verify integrity in audit chain (admin only). AS-IS.