IBM System Storage DS8A00 versions 10.1.3.0 to 10.11.35.0 and DS8900F versions 89.40.83.0 to 89.44.25.0 contain a vulnerability identified as CWE-116, related to improper encoding or escaping of output in the DSCLI command interface. This vulnerability could allow an attacker to bypass security authentication mechanisms, potentially obtaining sensitive information or causing denial of service conditions. The CVSS v3.1 score is 7.4, indicating high severity, with network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, no integrity impact, and high availability impact.

An attacker exploiting this vulnerability could bypass security authentication, leading to unauthorized access to sensitive information or disruption of service availability. The confidentiality and availability impacts are high, while integrity is not affected. No known exploits are reported in the wild at this time.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Until a fix is available, monitor IBM advisories for updates and consider restricting access to DSCLI interfaces to trusted users only.