CVEvulnerability

CVE-2025-36254

7.4 HIGH Published 2026-08-19 Modified 2026-09-29 Official page ↗
Status
Analyzed
Published
2026-08-19
Last modified
2026-09-29
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.4 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
Weaknesses
CWE-116

Description

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improperly encoding of DSCLI command output to obtain sensitive information or cause a denial of service.

Affected configurations

• ibm ds8900f firmware (>= 89.40.83.0 <= 89.44.25.0) • ibm ds8a00 firmware (>= 10.1.3.0 <= 10.11.35.0)

Related

Weakness · CWE (1)

  • CWE-116 Improper Encoding or Escaping of Output weakness

References