Read the docs
TI-2012-01628 Aliases CVE-2012-1844GHSA-v4g2-g68m-72jc

The Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also…

Priority LOW 39CWE-255Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100) and the IBM TS3310 tape library with firmware before R6C (606G.GS001), uses default passwords for unspecified user accounts, which makes it easier for remote attackers to obtain access via unknown vectors.

Why it matters now

EPSS 0.03332 88th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 25

CPEVersionsRoleVendor
cpe:2.3:a:quantum:scalar_i500_firmware:*:*:*:*:*:*:*:*up to i7.0.2VulnerableQuantum
cpe:2.3:a:quantum:scalar_i500_firmware:i2:*:*:*:*:*:*:*i2VulnerableQuantum
cpe:2.3:a:quantum:scalar_i500_firmware:i3:*:*:*:*:*:*:*i3VulnerableQuantum
cpe:2.3:a:quantum:scalar_i500_firmware:i3.1:*:*:*:*:*:*:*i3.1VulnerableQuantum
cpe:2.3:a:quantum:scalar_i500_firmware:i4:*:*:*:*:*:*:*i4VulnerableQuantum
cpe:2.3:a:quantum:scalar_i500_firmware:i5:*:*:*:*:*:*:*i5VulnerableQuantum
cpe:2.3:a:quantum:scalar_i500_firmware:i5.1:*:*:*:*:*:*:*i5.1VulnerableQuantum
cpe:2.3:a:quantum:scalar_i500_firmware:i6:*:*:*:*:*:*:*i6VulnerableQuantum
cpe:2.3:a:quantum:scalar_i500_firmware:i6.1:*:*:*:*:*:*:*i6.1VulnerableQuantum
cpe:2.3:a:quantum:scalar_i500_firmware:i7:*:*:*:*:*:*:*i7VulnerableQuantum
  • cpe:2.3:a:quantum:scalar_i500_firmware:*:*:*:*:*:*:*:* Versions up to i7.0.2 Vulnerable ·Quantum
  • cpe:2.3:a:quantum:scalar_i500_firmware:i2:*:*:*:*:*:*:* Versions i2 Vulnerable ·Quantum
  • cpe:2.3:a:quantum:scalar_i500_firmware:i3:*:*:*:*:*:*:* Versions i3 Vulnerable ·Quantum
  • cpe:2.3:a:quantum:scalar_i500_firmware:i3.1:*:*:*:*:*:*:* Versions i3.1 Vulnerable ·Quantum
  • cpe:2.3:a:quantum:scalar_i500_firmware:i4:*:*:*:*:*:*:* Versions i4 Vulnerable ·Quantum
  • cpe:2.3:a:quantum:scalar_i500_firmware:i5:*:*:*:*:*:*:* Versions i5 Vulnerable ·Quantum
  • cpe:2.3:a:quantum:scalar_i500_firmware:i5.1:*:*:*:*:*:*:* Versions i5.1 Vulnerable ·Quantum
  • cpe:2.3:a:quantum:scalar_i500_firmware:i6:*:*:*:*:*:*:* Versions i6 Vulnerable ·Quantum
  • cpe:2.3:a:quantum:scalar_i500_firmware:i6.1:*:*:*:*:*:*:* Versions i6.1 Vulnerable ·Quantum
  • cpe:2.3:a:quantum:scalar_i500_firmware:i7:*:*:*:*:*:*:* Versions i7 Vulnerable ·Quantum
Show 15 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:quantum:scalar_i500_firmware:i7.0.1:*:*:*:*:*:*:*i7.0.1VulnerableQuantum
cpe:2.3:a:quantum:scalar_i500_firmware:sp4:*:*:*:*:*:*:*sp4VulnerableQuantum
cpe:2.3:a:quantum:scalar_i500_firmware:sp4.2:*:*:*:*:*:*:*sp4.2VulnerableQuantum
cpe:2.3:h:quantum:scalar_i500:5u:*:*:*:*:*:*:*5uVulnerableQuantum
cpe:2.3:h:quantum:scalar_i500:14u:*:*:*:*:*:*:*14uVulnerableQuantum
cpe:2.3:h:quantum:scalar_i500:23u:*:*:*:*:*:*:*23uVulnerableQuantum
cpe:2.3:a:dell:powervault_ml6000_firmware:585g.gs003:*:*:*:*:*:*:*585g.gs003VulnerableDell
cpe:2.3:h:dell:powervault_ml6000:32u:*:*:*:*:*:*:*32uVulnerableDell
cpe:2.3:h:dell:powervault_ml6000:41u:*:*:*:*:*:*:*41uVulnerableDell
cpe:2.3:h:dell:powervault_ml6010:5u:*:*:*:*:*:*:*5uVulnerableDell
cpe:2.3:h:dell:powervault_ml6020:14u:*:*:*:*:*:*:*14uVulnerableDell
cpe:2.3:h:dell:powervault_ml6030:23u:*:*:*:*:*:*:*23uVulnerableDell
cpe:2.3:a:ibm:ts3310_tape_library_firmware:*:*:*:*:*:*:*:*up to 605g.g002VulnerableIBM
cpe:2.3:h:ibm:ts3310_tape_library:3573:*:*:*:*:*:*:*3573VulnerableIBM
cpe:2.3:h:ibm:ts3310_tape_library:3576:*:*:*:*:*:*:*3576VulnerableIBM
  • cpe:2.3:a:quantum:scalar_i500_firmware:i7.0.1:*:*:*:*:*:*:* Versions i7.0.1 Vulnerable ·Quantum
  • cpe:2.3:a:quantum:scalar_i500_firmware:sp4:*:*:*:*:*:*:* Versions sp4 Vulnerable ·Quantum
  • cpe:2.3:a:quantum:scalar_i500_firmware:sp4.2:*:*:*:*:*:*:* Versions sp4.2 Vulnerable ·Quantum
  • cpe:2.3:h:quantum:scalar_i500:5u:*:*:*:*:*:*:* Versions 5u Vulnerable ·Quantum
  • cpe:2.3:h:quantum:scalar_i500:14u:*:*:*:*:*:*:* Versions 14u Vulnerable ·Quantum
  • cpe:2.3:h:quantum:scalar_i500:23u:*:*:*:*:*:*:* Versions 23u Vulnerable ·Quantum
  • cpe:2.3:a:dell:powervault_ml6000_firmware:585g.gs003:*:*:*:*:*:*:* Versions 585g.gs003 Vulnerable ·Dell
  • cpe:2.3:h:dell:powervault_ml6000:32u:*:*:*:*:*:*:* Versions 32u Vulnerable ·Dell
  • cpe:2.3:h:dell:powervault_ml6000:41u:*:*:*:*:*:*:* Versions 41u Vulnerable ·Dell
  • cpe:2.3:h:dell:powervault_ml6010:5u:*:*:*:*:*:*:* Versions 5u Vulnerable ·Dell
  • cpe:2.3:h:dell:powervault_ml6020:14u:*:*:*:*:*:*:* Versions 14u Vulnerable ·Dell
  • cpe:2.3:h:dell:powervault_ml6030:23u:*:*:*:*:*:*:* Versions 23u Vulnerable ·Dell
  • cpe:2.3:a:ibm:ts3310_tape_library_firmware:*:*:*:*:*:*:*:* Versions up to 605g.g002 Vulnerable ·IBM
  • cpe:2.3:h:ibm:ts3310_tape_library:3573:*:*:*:*:*:*:* Versions 3573 Vulnerable ·IBM
  • cpe:2.3:h:ibm:ts3310_tape_library:3576:*:*:*:*:*:*:* Versions 3576 Vulnerable ·IBM

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-1844
  2. 2026-10-03 Alias added: GHSA-v4g2-g68m-72jc

References

Advisory 1

Other 4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences