CVE-2025-36250

Published: Nov 13, 2025Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56346.

Affected (4)

Products: Ibm: Aix, Vios

2 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Aix	Version 7.2
Ibm Aix	Version 7.3
Ibm Vios	Version 3.1.0
Ibm Vios	Version 4.1.0

Related CWEs

Process Control

Executing commands or loading libraries from an untrusted source or in an untrusted environment can cause an application to execute malicious commands (and payloads) on behalf of an attacker.

References (1)

https://www.ibm.com/support/pages/node/7251173

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.