CVE-2025-36254
HighCVSS 7.4Summary
IBM System Storage DS8A00 versions 10.1.3.0 through 10.11.35.0 and IBM DS8900F versions 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improper encoding of DSCLI command output, potentially obtaining sensitive information or causing a denial of service.
Risk Assessment
The risk includes unauthorized access to sensitive information and potential disruption of service availability.
Recommendation
Upgrade the firmware to the latest versions and monitor logs for unusual activity.
Original NVD description (English source)
IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improperly encoding of DSCLI command output to obtain sensitive information or cause a denial of service.