« Volver al listado

CVE-2026-5935

Estado: AnalizadaCrítica (9.8)—

IBM Total Storage Service Console (TSSC) / TS4500 IMC 9.2, 9.3, 9.4, 9.5, 9.6 TSSC/IMC could allow an unauthenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Vector CVSS con AV:N/PR:N/UI:N indica aplicación expuesta en red sin autenticación (T1190). CWE-78 y descripción de ejecución de comandos arbitrarios sustentan T1059 como impacto.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Privileged Account ManagementVulnerability ScanningRestrict Web-Based ContentNetwork SegmentationLimit Software InstallationLimit Access to Resource Over Network

Tecnologías afectadas (2)

IBM — Total Storage Service ConsoleIBM — Ts4500 IMC

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-5935",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-5935",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-04-23T13:57:07.349653Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@us.ibm.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.3,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:total_storage_service_console_tssc__ts4500_imc:9.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:total_storage_service_console_tssc__ts4500_imc:9.2.0:*:*:*:*:*:*:*"
          ],
          "vendor": "IBM",
          "product": "Total Storage Service Console (TSSC) / TS4500 IMC",
          "versions": [
            {
              "status": "affected",
              "version": "9.2.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.6.0"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-04-23T00:16:46.900",
  "references": [
    {
      "url": "https://www.ibm.com/support/pages/node/7270127",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@us.ibm.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Total Storage Service Console (TSSC) / TS4500 IMC 9.2, 9.3, 9.4, 9.5, 9.6 TSSC/IMC could allow an unauthenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input."
    }
  ],
  "lastModified": "2026-06-17T10:59:55.040",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:total_storage_service_console:9.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B9351F0-CCAE-4FF1-B4F7-6927E14CEAE1"
            },
            {
              "criteria": "cpe:2.3:a:ibm:total_storage_service_console:9.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C515F00-4712-45D3-84E6-180F7740AE4A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:total_storage_service_console:9.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "05359041-FF28-458C-9193-53293C03A1C5"
            },
            {
              "criteria": "cpe:2.3:a:ibm:total_storage_service_console:9.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "28BD55FD-194E-4996-AB4F-880300042D59"
            },
            {
              "criteria": "cpe:2.3:a:ibm:total_storage_service_console:9.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9321F67D-80EC-4CC6-B642-955C0864C410"
            },
            {
              "criteria": "cpe:2.3:a:ibm:ts4500_imc:9.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "116EE78F-D060-4F75-813C-54264734537B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:ts4500_imc:9.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "451E8164-7B55-4F04-A079-CBB07DE5E53F"
            },
            {
              "criteria": "cpe:2.3:a:ibm:ts4500_imc:9.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5E8C3809-E867-4C07-89E4-808C932E7BAC"
            },
            {
              "criteria": "cpe:2.3:a:ibm:ts4500_imc:9.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "01FE4835-0707-4CEE-A6C5-7F87FCF67D46"
            },
            {
              "criteria": "cpe:2.3:a:ibm:ts4500_imc:9.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17832436-EC1B-44D7-86CD-99D0B2BE9112"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}