This vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 NIM arises from improper neutralization of special elements used in OS commands, classified as CWE-78 (OS Command Injection). It enables remote authenticated attackers to execute arbitrary commands on the affected systems. The CVSS 3.1 base score is 9.9, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and complete impact on confidentiality, integrity, and availability. No vendor advisory or patch details are currently available.

Successful exploitation allows remote authenticated attackers to execute arbitrary OS commands, potentially leading to full system compromise including unauthorized data access, modification, or denial of service. The vulnerability affects core IBM AIX operating systems and IBM PowerVM VIOS, critical in enterprise environments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict remote authenticated access to affected systems and monitor for suspicious command execution activities where possible.