EUVD-2026-62517
GHSA-7fxw-9qpc-vjv7
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
NFS authentication bypass is fully network-exploitable with no privileges required; high confidentiality from exposed filesystem reads, low integrity from limited write access, no availability impact stated.
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
Lifecycle Timeline
2DescriptionCVE.org
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication.
AnalysisAI
Unauthenticated remote access to NFS-exported filesystems is possible in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 due to improper authentication (CWE-287). The CVSS vector AV:N/AC:L/PR:N/UI:N confirms that unauthenticated remote attackers on the network can exploit this with low complexity and no user interaction, gaining high-confidence read access and limited write access to exported filesystem data. No public exploit has been identified at time of analysis, and IBM has released a patch via advisory 7283858.
Technical ContextAI
IBM AIX is an enterprise-grade Unix operating system running on IBM Power hardware; IBM PowerVM VIOS (Virtual I/O Server) is the virtualization layer that mediates I/O resources for AIX and Linux logical partitions on the same system. NFS (Network File System) is a distributed filesystem protocol widely used in enterprise environments to share directory trees across networked hosts. CWE-287 (Improper Authentication) indicates that the NFS service on affected systems fails to properly verify the identity or credentials of remote clients before granting mount and file access to exported filesystem paths - the server effectively accepts requests it should reject. CPE strings cpe:2.3:a:ibm:aix:*:*:*:*:*:*:*:* and cpe:2.3:a:ibm:powervm_vios:*:*:*:*:*:*:*:* confirm both product lines are affected, with the CVE description scoping this specifically to AIX 7.2, 7.3 and PowerVM VIOS 4.1.
RemediationAI
Patch available per vendor advisory - apply the fix packages provided by IBM at https://www.ibm.com/support/pages/node/7283858, which should be consulted for exact iFix or Technology Level identifiers applicable to AIX 7.2, 7.3 and PowerVM VIOS 4.1; no specific fix version number was independently confirmed from the available intelligence. As compensating controls pending patching, administrators should restrict NFS export access by tightening /etc/exports to permit only explicitly trusted client IP addresses or subnets, and apply host-based or network firewall rules to block NFS ports (TCP/UDP 2049 and the RPC portmapper on port 111) from any untrusted network segments. Note that host-based NFS access controls may be insufficient if the authentication bypass undermines the validation mechanism itself - network-level segmentation provides a more reliable interim boundary. On systems where NFS server functionality is not operationally required, disabling the nfsd and rpcbind services eliminates the attack surface entirely.
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
OS command injection in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1 lets a remote, low-privileged authenticated attacker ru
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Same weakness CWE-287 – Improper Authentication
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today