CVE Intelligence
Analysis AI-assisted

CVE-2025-13375: IBM CCA: Unauthenticated Command Execution with Elevated Privileges

IBM Common Cryptographic Architecture (CCA) versions 7.5.52 and 8.4.82 are described as allowing an unauthenticated user to run arbitrary commands with elevated privileges. IBM's PSIRT assigned a CVSS 3.1 base score of 9.8 (critical), and the record maps the issue to CWE-250. The sources consulted show no confirmed exploitation, and the record contains no affected-version or fix data.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2025-13375 concerns IBM Common Cryptographic Architecture (CCA), with the description naming versions 7.5.52 and 8.4.82. The flaw is described as allowing an unauthenticated user to execute arbitrary commands with elevated privileges on the affected system. The record was published on 2026-02-04 and its source status is listed as Deferred.

Impact

  • The described outcome is arbitrary command execution, which could give an attacker control over the affected system.
  • The privileges are described as elevated, which would widen the effect of any command run.
  • The vector reported by IBM's PSIRT (CVSS 3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates network reachability, no privileges and no user interaction required, with high impact to confidentiality, integrity and availability.

Affected products and versions

  • The description names IBM CCA 7.5.52 and 8.4.82.
  • The structured affected-product list in the record is empty, so the exact affected ranges are unknown.
  • Other releases, branches and configurations are not addressed by the record and should be verified against the vendor bulletin: IBM support bulletin.

Exploitation status

  • The CISA KEV catalog does not list this CVE in the record.
  • No confirmed exploitation appears in the sources consulted.

Remediation and mitigation

  • Identify all IBM CCA installations and confirm their exact versions.
  • Review the IBM bulletin linked above for the vendor's current guidance, fixed levels and any interim measures.
  • Because the record gives no fixed version, do not assume a fix exists until the vendor bulletin confirms it.
  • Until a vendor fix is verified, reduce exposure: limit network access to the affected service to required hosts and monitor for unexpected privilege changes.

Detection guidance

  • Review system logs for unexpected process execution under privileged accounts on hosts running CCA.
  • Monitor for unusual network connections to CCA-related services from untrusted sources.
  • Compare running CCA versions against inventory to find instances that may be in scope.

Limitations of the available information

  • The record does not include a fixed version, patch details, or a list of affected version ranges.
  • No KEV, EPSS or SSVC data is present.
  • The CWE mapping (CWE-250, Execution with Unnecessary Privileges) is given in the record and is not expanded further here.
  • The NVD entry is referenced but its details are not included in the record provided.

Frequently asked questions

What is CVE-2025-13375?

It is a reported IBM Common Cryptographic Architecture (CCA) issue, described as allowing an unauthenticated user to execute arbitrary commands with elevated privileges. The description names versions 7.5.52 and 8.4.82.

Is CVE-2025-13375 being actively exploited?

The CVE is not listed in the CISA KEV catalog in this record, and no confirmed exploitation appears in the sources consulted.

Is there a fixed version for CVE-2025-13375?

The record does not include fixed versions. Check IBM's support bulletin for the vendor's current guidance before assuming a fix is available.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.