CVE-2025-1951

CVSS 8.4v3.1pub. 2025-04-22upd. 2025-08-12

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unnecessary privileges.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

IBM Hardware Management Console
APP
Ibm
10.2.1030.010.3.1050.0

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

CWE

CWE-250

References

www.ibm.com/support/pages/node/7231389…

Related vulnerabilities

CVE-2025-1950CRITICAL9.3PL ✓ten sam produkt

IBM Hardware Management Console — wykonanie poleceń przez niezaufane biblioteki

CVE-2023-38280HIGH8.4ten sam produkt

IBM HMC (Hardware Management Console) 10.1.1010.0 and 10.2.1030.0 could allow a local user to escalate their p...

CVE-2021-29707HIGH7.8ten sam produkt

IBM HMC (Hardware Management Console) V9.1.910.0 and V9.2.950.0 could allow a local user to escalate their pri...

CVE-2009-1806HIGH9.3ten sam produkt

Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.4.0 SP2, when Active Memory Sha...

CVE-2009-0178HIGH10.0ten sam produkt

Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 has unknown impact and ...