PT-2025-17545 · Ibm · Ibm Hardware Management Console

Jan Ruge + 1 · Published 2025-04-21 · Updated 2025-08-14 · CVE-2025-1950

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Hardware Management Console - Power Systems versions V10.2.1030.0 through V10.3.1050.0

Description A local privilege escalation issue has been identified, allowing local users to execute commands due to improper validation of libraries from an untrusted source. The estimated severity of this issue is high.

Recommendations For versions V10.2.1030.0 through V10.3.1050.0, update to V10.2.1040.0 SP3 to resolve the issue.

Fix

LPE

Weakness Enumeration

CWE-114

Related Identifiers

BDU:2025-06853

CVE-2025-1950

Affected Products

Ibm Hardware Management Console

References · 14

• https://bdu.fstec.ru/vul/2025-06853 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-1950 · Security Note
• https://osv.dev/vulnerability/CVE-2025-1950 · Vendor Advisory
• https://twitter.com/syedaquib77/status/1915026324063760598 · Twitter Post
• https://twitter.com/threatsbank/status/1914998575769043177 · Twitter Post
• https://twitter.com/cybercronai/status/1915337587079676289 · Twitter Post
• https://twitter.com/CVEnew/status/1914699739028729860 · Twitter Post
• https://ibm.com/support/pages/node/7231507 · Vendor Advisory, Patch
• https://t.me/cvetracker/22130 · Telegram Post
• https://twitter.com/Enno_Insinuator/status/1916575218551714096 · Twitter Post
• https://twitter.com/BaseFortify/status/1914762504405700939 · Twitter Post
• https://t.me/cveNotify/132174 · Telegram Post
• https://twitter.com/vulns_space/status/1914707179778568234 · Twitter Post
• https://t.me/cvedetector/23519 · Telegram Post