First published: Tue Apr 22 2025(Updated: )
IBM Hardware Management Console - Power Systems could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Hardware Management Console - Power Systems | ||
IBM Hardware Management Console (7063-CR2) | <=V10.2.1030.0 | |
IBM HMC | <=V10.3.1050.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2025-1950 has been rated with a high severity level due to its potential for privilege escalation.
To fix CVE-2025-1950, update your IBM Hardware Management Console to versions V10.2.1031.0 or V10.3.1051.0 or later.
CVE-2025-1950 affects local users of IBM Hardware Management Console versions V10.2.1030.0 and V10.3.1050.0.
The potential impacts of CVE-2025-1950 include unauthorized command execution by a local user, which can compromise system integrity.
As of now, there are no known active exploits for CVE-2025-1950 reported in the wild.