Multiple Vulnerabilities in IBM AIX could allow for arbitrary code execution.

Multiple vulnerabilities in IBM AIX were disclosed affecting the nimesis NIM master service (CVE-2024-56346) and the nimsh service (CVE-2024-56347). Both issues can lead to arbitrary command execution—one potentially without user interaction and the other requiring some interaction—allowing attackers to install programs, view/change/delete data, or create accounts depending on the targeted account's privileges; the report maps the findings to MITRE ATT&CK (Initial Access, T1190).