by Kastro
Paper/Archive/CVE-2025-13375

CVE-2025-13375

IBM Common Cryptographic Architecture — IBM Common Cryptographic Architecture Arbitrary Command Execution

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 46.1.461 × 209.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IBM Common Cryptographic Architecture (CCA) 7.5.52 and 8.4.82 could allow an unauthenticated user to execute arbitrary commands with elevated privileges on the system.

Affected

ProductAffectedFixed inSource
Common Cryptographic Architecture7.5.52–CNA
Common Cryptographic Architecture8.4.82–CNA
IBM 4769 Developers Toolkit7.5.52–CNA

Scores by source

ibm (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

patchibm.com/support/pages/node/7259625