CVE-2025-36251

Critical

Published: 13/11/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

The nimsh service in IBM AIX 7.2, 7.3 and IBM VIOS 3.1, 4.1 contains a vulnerability in its SSL/TLS implementation that could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability previously addressed in CVE-2024-56347.

Risk Assessment

An attacker could gain control of the system and execute arbitrary commands, potentially leading to full system and data compromise.

Recommendation

Apply the latest security patches provided by IBM for AIX and VIOS to remediate this vulnerability.

Original NVD description (English source)

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56347.