Elevated Privilege Vulnerability in IBM Backup, Recovery and Media Services
CVE-2025-33108

8.5HIGH

Key Information:

Vendor

IBM

Vendor
CVE Published:
14 June 2025

Badges

đź“° News Worthy

What is CVE-2025-33108?

A security vulnerability in IBM Backup, Recovery, and Media Services for versions 7.4 and 7.5 may permit users with permissions to compile or restore programs to exploit unqualified library calls. This could allow unauthorized execution of user-controlled code with component access to the underlying host operating system, posing a risk of unauthorized data access or system manipulation.

Affected Version(s)

Backup Recovery and Media Services for i 7.4, 7.5

News Articles

IBM Backup Services Flaw Allows Hackers to Gain Elevated Access

A critical security vulnerability has been identified in IBM’s Backup, Recovery, and Media Services (BRMS) for IBM i, potentially exposing enterprise environments to privilege escalation attacks.

4 weeks ago

References

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • đź“°

    First article discovered by GBHackers News

  • Vulnerability published

.
CVE-2025-33108 : Elevated Privilege Vulnerability in IBM Backup, Recovery and Media Services