Local Command Execution Vulnerability in IBM Hardware Management Console for Power Systems
CVE-2025-1950

9.3CRITICAL

Key Information:

Vendor

IBM
Status
Hardware Management Console - Power Systems
Vendor
CVE Published:
22 April 2025

What is CVE-2025-1950?

The vulnerability in IBM's Hardware Management Console for Power Systems occurs when a local user is able to execute unauthorized commands. This situation arises from improper validation of libraries sourced from untrusted origins, resulting in potential execution of harmful commands. Users of affected versions should be aware of the security implications and take appropriate measures to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Hardware Management Console - Power Systems V10.2.1030.0

Hardware Management Console - Power Systems V10.3.1050.0

References

https://www.ibm.com/support/pages/node/7231507
vendor-advisorypatch

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.