CVE-2025-36250
CriticalSummary
The NIM server (nimesis) service in IBM AIX 7.2, 7.3 and IBM VIOS 3.1, 4.1 contains a vulnerability that could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability previously addressed in CVE-2024-56346.
Risk Assessment
A remote attacker could execute arbitrary commands on the NIM server, potentially compromising system integrity and data.
Recommendation
Install the latest security patches from IBM for AIX and VIOS to secure the NIM service.
Original NVD description (English source)
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56346.