IBM 3957-Ved Firmware vulnerabilities

3 CVEs affecting IBM 3957-Ved Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-36056, published 2025-07-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-24958, published 2023-05-04. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability in the IBM TS7700 Management Interface 8.51.2.12, 8.52.200.111, 8.52.102.13, and 8.53.0.63 could allow an authenticated user to submit a specially crafted URL leading to privilege…
CVE-2025-2141, published 2025-07-01. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. IBM System Storage Virtualization Engine TS7700 3957 VED R5.4 8.54.2.17, R6.0 8.60.0.115, 3948 VED R5.4 8.54.2.17, R6.0 8.60.0.115, and 3948 VEF R6.0 8.60.0.115 is vulnerable to cross-site scripting.…
CVE-2025-36056, published 2025-07-01. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. IBM System Storage Virtualization Engine TS7700 3957 VED R5.4 8.54.2.17, R6.0 8.60.0.115, 3948 VED R5.4 8.54.2.17, R6.0 8.60.0.115, and 3948 VEF R6.0 8.60.0.115 is vulnerable to cross-site scripting.…