BaseFortify

Publication date: 2026-06-30

Last updated on: 2026-06-30

Assigner: ICS-CERT

Description

Storage Concentrator (SC & SCVM) contains a command injection vulnerability in the ms_service.pl service, which listens on TCP port 9000 by default and accepts custom network packets to perform device actions. An unauthenticated remote attacker can send a specially crafted packet containing a malicious payload that is processed without adequate sanitization, resulting in arbitrary command execution with root-level privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-30

Last Modified

2026-06-30

Generated

2026-07-01

AI Q&A

2026-07-01

EPSS Evaluated

N/A

NVD

CVE-2026-56413

EUVD

EUVD-2026-40845

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Storage Concentrator (SC & SCVM) within the ms_service.pl service, which listens on TCP port 9000 by default. It is a command injection vulnerability where the service accepts custom network packets to perform device actions. An unauthenticated remote attacker can send a specially crafted packet containing a malicious payload. Because the payload is processed without adequate sanitization, this leads to arbitrary command execution with root-level privileges.

Impact Analysis

The impact of this vulnerability is severe. An attacker can remotely execute arbitrary commands on the affected system with root-level privileges without any authentication. This can lead to full system compromise, unauthorized access to sensitive data, disruption of services, and potential use of the system as a foothold for further attacks.

Hi! I’m here to help you understand CVE-2026-56413. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70