CVE-2023-28528 - IBM AIX command execution

Back Back to CVE browser

HIGH

IBM AIX command execution

Published Apr 28, 2023

8.4

HIGH

CVSS 3.1

EPSS 1.46%

Description

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 251207.

Affected products

Vendor IBM Product AIX Default
unaffected
- Version
  7.1, 7.2, 7.3, VIOS 3.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

AIX

unaffected

Version	Status	Constraints
7.1, 7.2, 7.3, VIOS 3.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (5)

http://packetstormsecurity.com/files/172458/IBM-AIX-7.2-inscout-Privilege-Escalation.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-32198
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/251207
vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6983232
vendor-advisoryPatchVendor Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1691

Link	Providers	Tags
http://packetstormsecurity.com/files/172458/IBM-AIX-7.2-inscout-Privilege-Escalation.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-32198		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/251207		vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6983232		vendor-advisoryPatchVendor Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1691