The vulnerability is an access‑control bypass in InfoScale CmdServer versions earlier than 7.4.2. It allows an attacker to circumvent the authentication and authorization checks that protect the command interface, enabling the execution of privileged operations, modification of configuration settings, or other actions that compromise the management capabilities of the system.

Any installation of InfoScale CmdServer that is running a version prior to 7.4.2 is susceptible. The advisory does not name a specific vendor, but the product is typically deployed as the central command and control component for certain storage appliance environments.

The flaw carries a CVSS score of 8.8, indicating high severity. The EPSS score is not available, and the vulnerability is not currently listed in CISA’s KEV catalog, so no public exploitation has been reported. Based on the description, the attack is likely to be carried out remotely via the network‑exposed CmdServer interface, or locally if an attacker can reach the service through an accessible port or gain local access to the host.