Latest IBM AIX vulnerabilities: CVE-2024-56346 and CVE-2024-56347 #
Certain versions of IBM AIX (IBM's proprietary UNIX operating system) contain vulnerabilities in the Network Install Manager (NIM) subsystem. This subsystem is used to automate installation and configuration of AIX systems.
Successfully exploiting this vulnerabilities would allow an attacker to execute arbitrary code with administrative privileges on the affected systems. These vulnerabilities are assigned CVE-2024-56346 and CVE-2024-56347 and are considered extremely critical with CVSS scores of 10.0 and 9.6.
Are updates available? #
IBM has released patch sets that address these vulnerabilities, and users are advised to update as quickly as possible. Additionally, users are advised to use network access controls to isolate potentially vulnerable systems and allow access only from trusted networks.
How do I find potentially vulnerable AIX systems with runZero? #
AIX systems can be found by navigating to the Asset Inventory and using the following query:
os:AIX
