CVE-2012-1843: Cross-site request forgery (CSRF) vulnerability in saveRestore.htm on the Quantum Scalar i500 tape library...

Security readout for executives and security teams

This flaw affects certain Quantum Scalar i500 and Dell ML6000 tape libraries. A malicious site could abuse a logged-in user’s browser to send unwanted management requests that may execute Linux commands on the appliance. Business urgency depends on whether these legacy tape libraries are still deployed and reachable. Exposure is most likely in environments still operating these tape libraries with vulnerable firmware and browser-accessible management interfaces. Risk increases if administrators use the web interface from general browsing workstations or if management access is broadly reachable. Treat as high priority if affected tape libraries remain in production. The issue involves potential command execution on backup infrastructure, which can affect recovery operations. If these products are not deployed or are already updated, residual risk is lower. Mitigation focus: Upgrade Quantum Scalar i500 firmware to i7.0.3 or later, if applicable.; Upgrade Dell ML6000 firmware to A20-00 or later, if applicable.; Restrict tape library management interfaces to trusted administrative networks..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.