CVE-2023-24958 – IBM TS7700 Management Interface command injection

https://notcve.org/view.php?id=CVE-2023-24958

A vulnerability in the IBM TS7700 Management Interface 8.51.2.12, 8.52.200.111, 8.52.102.13, and 8.53.0.63 could allow an authenticated user to submit a specially crafted URL leading to privilege escalation and remote code execution. IBM X-Force ID: 246320. • https://exchange.xforce.ibmcloud.com/vulnerabilities/246320 https://www.ibm.com/support/pages/node/6980845 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •