CVE-2025-33108CWE-250

IBM Backup Recovery and Media Services for i code execution

High · published June 14, 2025

CVSS v3.1
8.5
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

IBM Backup, Recovery and Media Services for i 7.4 and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to a library unqualified call made by a BRMS program. A malicious actor could cause user-controlled code to run with component access to the host operating system.

The record
Technical detail
CVSS v3.1
8.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00605 · 48.3th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2025-06-14T00:25Z
EPSS history
Timeline
  • 14 JUN 00:25Z
    IBM Backup Recovery and Media Services for i code execution
    cvelistv5