CVE-2025-33108 — IBM Backup Recovery and Media Services for i code execution

CVE-2025-33108

IBM Backup Recovery and Media Services for i code execution PUBLISHED

Description (CNA)

IBM Backup, Recovery and Media Services for i 7.4 and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to a library unqualified call made by a BRMS program. A malicious actor could cause user-controlled code to run with component access to the host operating system.

Affected (CNA)

Vendor / product	Versions
IBM / Backup Recovery and Media Services for i	affected 7.4; affected 7.5

CWE

CWE-250

References

https://www.ibm.com/support/pages/node/7236663

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.