CVE-2024-39723

CWE-1299CWE-287 — Improper Authentication3 documents3 sources
Severity
4.6MEDIUM
EPSS
0.1%
top 82.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Storage Virtualize
Timeline
PublishedJul 8

Description

IBM FlashSystem 5300 USB ports may be usable even if the port has been disabled by the administrator. A user with physical access to the system could use the USB port to cause loss of access to data. IBM X-Force ID: 295935.

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 0.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/storage_virtualize8.6

🔴Vulnerability Details

2
GHSA
GHSA-jr9f-3xg9-2j4f: IBM FlashSystem 5300 USB ports may be usable even if the port has been disabled by the administrator↗2024-07-08
▶
CVEList
IBM FlashSystem denial of service↗2024-07-08
▶