The IBM TS4500 CLI tool, from version 0.1.31 up through 1.12.0.0, contains an improper TLS certificate validation routine that could be abused by an attacker to conduct man‑in‑the‑middle (MITM) attacks. By intercepting the traffic between the CLI tool and the target device, an adversary could capture sensitive data such as credentials, configuration information, or other communications. The weakness is explicitly identified as an improper validation of TLS certificates (CWE‑295).

All installations of the IBM TS4500 CLI tool that use versions prior to the fix pack 1.12.0.2 are susceptible. The recommended fix applies to the tool’s package from IBM Fix Central, which restores proper TLS certificate verification. The product is used in command‑line environments to manage TS4500 digital transceivers; any user of the affected CLI tool is at risk.

The CVSS score of 5.9 indicates a medium impact level. The EPSS score of less than 1% implies that active exploitation is not widespread yet. The vulnerability is not listed in the CISA KEV catalog. The likely attack path requires the attacker to position a rogue network element between the CLI tool and the TS4500 device, and to present a non‑trusted TLS certificate that the tool fails to verify correctly. With this setup, the attacker can eavesdrop on or modify the control traffic.