IBM AIX and VIOS nimsh Service Command Execution Vulnerability

A vulnerability in the SSL/TLS implementations of the nimsh service in IBM AIX versions 7.2 and 7.3, as well as IBM VIOS versions 3.1 and 4.1, could allow a remote attacker to execute arbitrary commands. This issue arises from improper process controls and introduces additional attack vectors for a vulnerability previously addressed in CVE-2024-56347.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of commands on the affected system.

Remediation

Users can download the necessary fixes from the IBM AIX and VIOS fix repositories. Instructions for verifying and installing these fixes are available in the AIX Security Bulletin.