8.4
CWE
250
Advisory Published
CVE Published
Updated

CVE-2024-27260: IBM AIX command execution

First published: Wed May 15 2024(Updated: )

IBM AIX could 7.2, 7.3, VIOS 3.1, and VIOS 4.1 allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 283985.

Credit: psirt@us.ibm.com

Affected SoftwareAffected VersionHow to fix
IBM AIX<=7.2
IBM AIX<=7.3
IBM Virtual I/O Server (VIOS)<=3.1
IBM Virtual I/O Server (VIOS)<=4.1

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Parent vulnerabilities

(Appears in the following advisories)

Frequently Asked Questions

  • What is the severity of CVE-2024-27260?

    CVE-2024-27260 is considered a high-severity vulnerability due to its potential for arbitrary command execution by a non-privileged local user.

  • How do I fix CVE-2024-27260?

    To fix CVE-2024-27260, update your IBM AIX or VIOS to the latest patched version provided by IBM.

  • Who is affected by CVE-2024-27260?

    CVE-2024-27260 affects IBM AIX versions 7.2 and 7.3, as well as VIOS versions 3.1 and 4.1.

  • What type of exploitation is possible with CVE-2024-27260?

    CVE-2024-27260 allows a non-privileged local user to exploit the invscout command to execute arbitrary commands.

  • When was CVE-2024-27260 disclosed?

    CVE-2024-27260 was disclosed in 2024, and affected users should take immediate action to mitigate the vulnerability.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203