Vulnerability Spotlight: Vulnerabilities in IBM AIX could lead to command injection with elevated privileges

Tim Brown of Cisco Security Advisory EMEA discovered these vulnerabilities and contributed to this blog post.

A Cisco security researcher recently discovered two vulnerabilities in the IBM AIX Unix platforms that could be exploited to inject commands and logs into targeted systems with elevated privileges.

AIX is a more than 20-year-old set of operating systems for Unix that run on various IBM platforms.

TALOS-2023-1690 (CVE-2023-26286) is a vulnerability in AIX’s errlog() syscall functionality that can be triggered if an adversary …

adversary advisory aix blog blog post cisco cisco security command command injection cve emea exploited ibm inject injection logs old operating systems platforms privileges researcher run security security advisory security researcher spotlight syscall systems talos tim unix vulnerabilities vulnerability vulnerability spotlight