CVE-2025-1950

Published: Apr 22, 2025Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source.

Affected (2)

Products: Ibm: Hardware Management Console

Ibm

1 product

Hardware Management Console

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Hardware Management Console	Version 10.2.1030.0
Ibm Hardware Management Console	Version 10.3.1050.0

Related CWEs

CWE-114

Process Control

Executing commands or loading libraries from an untrusted source or in an untrusted environment can cause an application to execute malicious commands (and payloads) on behalf of an attacker.

References (1)

https://www.ibm.com/support/pages/node/7231507

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.