CVE-2023-24958: IBM 3948-Ved Firmware

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A vulnerability in the IBM TS7700 Management Interface 8.51.2.12, 8.52.200.111, 8.52.102.13, and 8.53.0.63 could allow an authenticated user to submit a specially crafted URL leading to privilege escalation and remote code execution. IBM X-Force ID: 246320.

Affected products

• IBM 3948-Ved Firmware: from 8.53.0, up to and including 8.53.0.63
• IBM 3957-Vec Firmware: from 8.51.0, before 8.51.2.12 (fixed in 8.51.2.12); from 8.52.100.0, before 8.52.102.13 (fixed in 8.52.102.13)
• IBM 3957-Ved Firmware: from 8.51.0, before 8.51.2.12 (fixed in 8.51.2.12); from 8.52.100.0, before 8.52.102.13 (fixed in 8.52.102.13); from 8.52.200.0, before 8.52.200.111 (fixed in 8.52.200.111); from 8.53.0, before 8.53.0.63 (fixed in 8.53.0.63)

Published 2023-05-04. Last modified 2026-06-17.