High severity8.8NVD Advisory· Published May 4, 2023· Updated Jun 17, 2026

CVE-2023-24958

Description

A vulnerability in the IBM TS7700 Management Interface 8.51.2.12, 8.52.200.111, 8.52.102.13, and 8.53.0.63 could allow an authenticated user to submit a specially crafted URL leading to privilege escalation and remote code execution. IBM X-Force ID: 246320.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/3948 Ved Firmware
cpe:2.3:o:ibm:3948-ved_firmware:*:*:*:*:*:*:*:*
Range: >=8.53.0,<=8.53.0.63
IBM/3957 Vec Firmware
cpe:2.3:o:ibm:3957-vec_firmware:*:*:*:*:*:*:*:*
Range: >=8.51.0,<8.51.2.12
IBM/3957 Ved Firmware
cpe:2.3:o:ibm:3957-ved_firmware:*:*:*:*:*:*:*:*
Range: >=8.51.0,<8.51.2.12
IBM/TS7700 Management Interfacellm-fuzzy
Range: 8.51.2.12, 8.52.200.111, 8.52.102.13, and 8.53.0.63
IBM/System Storage Virtualization Engine Ts7700cpe-rescue
Range: 8.51.2.12, 8.52.200.111, 8.52.102.13, 8.53.0.63

Patches

Vulnerability mechanics

References

exchange.xforce.ibmcloud.com/vulnerabilities/246320nvdVDB EntryVendor Advisory
www.ibm.com/support/pages/node/6980845nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000