EUVD-2026-62517
GHSA-7fxw-9qpc-vjv7
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
NFS authentication bypass is fully network-exploitable with no privileges required; high confidentiality from exposed filesystem reads, low integrity from limited write access, no availability impact stated.
Primary rating from Vendor (ibm).
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Lifecycle Timeline
2DescriptionNVD
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication.
AnalysisAI
Unauthenticated remote access to NFS-exported filesystems is possible in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 due to improper authentication (CWE-287). The CVSS vector AV:N/AC:L/PR:N/UI:N confirms that unauthenticated remote attackers on the network can exploit this with low complexity and no user interaction, gaining high-confidence read access and limited write access to exported filesystem data. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The affected system must have NFS server services running and at least one filesystem exported via /etc/exports or equivalent AIX NFS configuration. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 8.2 reflects genuine severity: the AV:N/AC:L/PR:N/UI:N vector means an unauthenticated attacker with network reachability can exploit this without any special conditions or interaction, and C:H indicates high-value data exposure from accessible NFS-exported paths. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated attacker on a network segment with access to an IBM AIX or PowerVM VIOS host sends NFS mount and file access requests that bypass the server's authentication checks, successfully mounting one or more exported filesystem paths without presenting valid credentials. No public exploit has been identified at time of analysis, so practical exploitation would currently require an attacker with knowledge of the specific authentication flaw and the ability to craft or replay NFS protocol messages that circumvent the validation logic. |
| Remediation | Patch available per vendor advisory - apply the fix packages provided by IBM at https://www.ibm.com/support/pages/node/7283858, which should be consulted for exact iFix or Technology Level identifiers applicable to AIX 7.2, 7.3 and PowerVM VIOS 4.1; no specific fix version number was independently confirmed from the available intelligence. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 systems and identify NFS-exported filesystems accessible from untrusted networks. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, a
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout c
IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privile
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to ob
IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCM
libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar
libodm.a in IBM AIX 6.1 and 7.1, and VIOS 2.2.x, allows local users to overwrite arbitrary files via a symlink attack on
IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improp
OS command injection in IBM AIX 7.2 and 7.3 and in IBM PowerVM VIOS 4.1 lets a remote, authenticated attacker execute ar
OS command injection in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 lets a remote authenticated attacker run arbitrary commands
Remote code execution in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 allows an unauthenticated remote attacker to run a
Same weakness CWE-287 – Improper Authentication
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today