Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56347.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 2 products
https://www.ibm.com/support/pages/security-bulletin-aix-vulnerable-arbitrary-command-execution-cve-2025-36251-cve-2025-36250-insufficiently-protected-credentials-cve-2025-36096-and-path-traversal-cve-2025-36236
Post summary
IBM has published a security bulletin enumerating several AIX CVEs, including arbitrary command execution, credential exposure, and path traversal issues, implying remediation guidance.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | ibm | aix | 7.2 | - | - |
| OS | ibm | aix | 7.3 | - | - |
| App | ibm | vios | 3.1.0 | - | - |
| App | ibm | vios | 4.1.0 | - | - |