CVE-2024-39723: medium-severity vulnerability in IBM Storage Virtualize
IBM FlashSystem denial of service
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
IBM FlashSystem 5300 storage systems have a flaw where USB ports remain usable even after an administrator disables them. Someone with physical access to the device could exploit this to block access to stored data.
A physical access vulnerability in IBM FlashSystem 5300 where disabled USB ports fail to enforce access restrictions, allowing an attacker to leverage USB connectivity to trigger a denial of service condition affecting data availability. Mitigation requires proper physical security controls in addition to administrative port disabling.
In the same product, most dangerous first.