IBM AIX command execution

published 2023-04-28 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-32198

cvss: 8.4; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 1.5%; EPSS 1.5% chance of exploitation in 30 days, percentile 73%
public exploits: 1; Metasploit

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 251207.

Patch / fix

links 1

ibm.com/support/pages/node/6983232 advisory

Timeline

2023-04-24 First public exploit (Metasploit exploit/aix/local/invscout_rpm_priv_esc)
2023-04-28 Published

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 21 mo ago (2025-01-30)

Exploit prediction

1.46% chance of exploitation in the next 30 days, higher than 73% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

Metasploit exploit/aix/local/invscout_rpm_priv_esc invscout RPM Privilege Escalation metasploit exploit, excellent rank, 2023-04-24

CVSS scores

assigned by	version	score	vector
CNA	3.1	8.4	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD	3.1	7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

IBM AIX

Classification

Weakness

CWE-78 Improper Neutralization of Special Elements used in an OS Command

References

ibm.com /support/pages/node/6983232
vendor-advisory, patch
exchange.xforce.ibmcloud.com /vulnerabilities/251207
vdb-entry, vendor-advisory
packetstormsecurity.com /files/172458/IBM-AIX-7.2-inscout-Privilege-Escalation.html
talosintelligence.com /vulnerability_reports/TALOS-2023-1691

Sources

CVE List CVE-2023-28528
NVD CVE-2023-28528

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary