Skip to content
OpenAdvisories
High · 8.8 CVE-2023-24958 EUVD-2023-28945GHSA-p73q-78q5-cwpp

IBM TS7700 Management Interface command injection

Published May 4, 2023 · Updated Jan 29, 2025 · Assigned by ibm

Description

A vulnerability in the IBM TS7700 Management Interface 8.51.2.12, 8.52.200.111, 8.52.102.13, and 8.53.0.63 could allow an authenticated user to submit a specially crafted URL leading to privilege escalation and remote code execution. IBM X-Force ID: 246320.

Affected products

VendorProductAffectedFixed
IBM Virtualization Engine TS7700 8.51.2.12, 8.52.200.111, 8.52.102.13, 8.53.0.63 —

References