Skip to content
CVSS 7.3 · HIGH

CVE-2026-5935

IBM Total Storage Service Console (TSSC) / TS4500 IMC 9.2, 9.3, 9.4, 9.5, 9.6 TSSC/IMC could allow an unauthenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.

Ver en NVD

Análisis

This vulnerability allows an unauthenticated user to execute arbitrary commands on IBM Total Storage Service Consoles and TS4500 IMC systems. While the technical severity is high, this product is specialized enterprise storage hardware and does not align with the community's primary focus on web, mobile, and general cloud development stacks.

Severidad

Puntaje: 7.3(HIGH)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
AV: NETWORK
AC: LOW
PR: NONE
UI: NONE
S: UNCHANGED
C: LOW
I: LOW
A: LOW
Tipo de falla (CWE): CWE-78

EPSS

Probabilidad de explotación (próx. 30 días): 0.0006 (0.1%)
Percentil: 18.8%
EPSS: 2026-05-06

Descripción técnica

IBM Total Storage Service Console (TSSC) / TS4500 IMC 9.2, 9.3, 9.4, 9.5, 9.6 TSSC/IMC could allow an unauthenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.

Publicada: 23/4/2026, 0:16:46
Última modificación: 24/4/2026, 14:50:56

Referencias

InicioEventosBlogRecursosEquipo