Local Command Execution Vulnerability in IBM Hardware Management Console for Power Systems
CVE-2025-1950

9.3CRITICAL

Key Information:

Vendor
IBM
Status
Hardware Management Console - Power Systems
Vendor
CVE Published:
22 April 2025

Summary

The vulnerability in IBM's Hardware Management Console for Power Systems occurs when a local user is able to execute unauthorized commands. This situation arises from improper validation of libraries sourced from untrusted origins, resulting in potential execution of harmful commands. Users of affected versions should be aware of the security implications and take appropriate measures to mitigate risks.

Affected Version(s)

Hardware Management Console - Power Systems V10.2.1030.0, V10.3.1050.0

References

https://www.ibm.com/support/pages/node/7231507
vendor-advisory

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.