CVE:CVE-2023-24958
CNNVD:CNNVD-202305-221
IBM Ts7700是美国国际商业机器（IBM）公司的一款大型机虚拟磁带解决方案。用于优化数据安全性和业务连续性。
IBM Ts7700 Management Interface存在操作系统命令注入漏洞，该漏洞源于可能允许经过身份验证的用户提交特制 URL，从而导致权限提升和远程代码执行。
solution:Upgrade ibm 3957-vec_firmware to a higher version than 8.51.2.12,8.52.102.13,and avoid the version [8.51.0,8.51.2.12),[8.52.100.0,8.52.102.13); Upgrade ibm 3957-ved_firmware to a higher version than 8.51.2.12,8.52.102.13,8.52.200.111,8.53.0.63,and avoid the version [8.51.0,8.51.2.12),[8.52.100.0,8.52.102.13),[8.52.200.0,8.52.200.111),[8.53.0,8.53.0.63); Upgrade ibm 3948-ved_firmware to a higher version than 8.53.0.63,and avoid the version [8.53.0,8.53.0.63]