PT-2025-26808 · Ibm · Facsimile Support For I+1

Zoltan Panczel

·

Published

2025-06-24

·

Updated

2025-08-02

·

CVE-2025-36004

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: IBM i versions 7.2 through 7.5
Description: The issue allows a user to gain elevated privileges due to an unqualified library call in IBM Facsimile Support for i. A malicious actor could cause user-controlled code to run with administrator privilege.
Recommendations: For IBM i versions 7.2 through 7.5, consider restricting access to the Facsimile Support for i until a patch is available to prevent exploitation of the unqualified library call. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2025-08070
CVE-2025-36004

Affected Products

Facsimile Support For I
Ibm I