PT-2025-46923 · Ibm · Aix+2

CVE-2025-36250 · Publicado 2025-11-13 · Atualizado 2025-12-23

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM VIOS versions 3.1 and 4.1

Description The NIM server (formerly known as NIM master) service (nimesis) in IBM AIX and IBM VIOS may allow a remote attacker to execute arbitrary commands and traverse directories on the system. An attacker could potentially send a specially crafted URL request to write arbitrary files. This issue addresses additional attack vectors for a previously addressed issue.

Recommendations IBM AIX version 7.2 IBM AIX version 7.3 IBM VIOS version 3.1 IBM VIOS version 4.1 Restrict access to the NIM server.

Correção

RCE

Enumeração de Fraquezas

CWE-114

Identificadores relacionados

BDU:2025-14676

CVE-2025-36250

Produtos afetados

Aix

Ibm Aix

Vios

Referências · 23

• https://reddit.com/r/CVEWatch/comments/1p092hc/top_10_trending_cves_18112025 · Publicação no Reddit
• https://ibm.com/support/pages/node/7251173 · Correção, Aviso do Fabricante
• https://twitter.com/offseq/status/1989121472376225901 · Publicação no Twitter
• https://twitter.com/0dayPublishing/status/1989357646965604776 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-36250 · Aviso do Fabricante
• https://reddit.com/r/CVEWatch/comments/1p14p4v/top_10_trending_cves_19112025 · Publicação no Reddit
• https://twitter.com/CVEnew/status/1989194839418868054 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2025-14676 · Nota de Segurança
• https://twitter.com/CrowdCyber_Com/status/1990494635240706487 · Publicação no Twitter
• https://twitter.com/autumn_good_35/status/1989376182429856000 · Publicação no Twitter
• https://twitter.com/guriguri_dW/status/1991334314018210273 · Publicação no Twitter
• https://twitter.com/zoomeye_team/status/1990263006878654758 · Publicação no Twitter
• https://t.me/pentestingnews/70990 · Publicação no Telegram
• https://t.me/poxek/5676 · Publicação no Telegram
• https://t.me/CVEtracker/37294 · Publicação no Telegram