What is CVE-2024-27273?

CVE-2024-27273 is a high-severity vulnerability in Ibm Aix, classified under Incorrect Privilege Assignment. CVSS score: 8.1/10. Published 2024-05-07.

How severe is CVE-2024-27273?

High severity. CVSS v3 base score is 8.1 out of 10.

Privilege escalation in Ibm Aix

CVE-2024-27273

IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket implementation could potentially expose applications using Unix domain datagram sockets with SO_PEERID operation and may lead to privilege escalation. IBM X-Forc…

EPSS: 0.001 (4.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Ibm Aix — versions 7.2, 7.3, 7.2, 7.3, VIOS 3.1, VIOS 4.1
Ibm Vios — versions 3.1, 4.1

Weakness classification (CWE)

CWE-266 — Incorrect Privilege Assignment

References

psirt@us.ibm.com (vendor-advisory, Vendor Advisory)
psirt@us.ibm.com (vdb-entry, Vendor Advisory)

Frequently asked questions

What is CVE-2024-27273?: CVE-2024-27273 is a high-severity vulnerability in Ibm Aix, classified under Incorrect Privilege Assignment. CVSS score: 8.1/10. Published 2024-05-07.
How severe is CVE-2024-27273?: High severity. CVSS v3 base score is 8.1 out of 10.