← Back

CVE-2024-56347

nvd nist
Published: Mar 18, 2025Modified: Jun 17, 2026

JSON object

Loading...
9.6
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 6.0
Source: psirt@us.ibm.com (Secondary)

Description

IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due to improper process controls.

Affected (2)

Products: Ibm: Aix
Ibm
1 product
Aix
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ibm
Aix
Version 7.2
Aix
Version 7.3
Running on/withPlatform Versions
Ibm
Aix
All versions

Related CWEs

CWE-114
Process Control
Executing commands or loading libraries from an untrusted source or in an untrusted environment can cause an application to execute malicious commands (and payloads) on behalf of an attacker.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.