High severity · published Dec 14, 2023
CVE-2023-45185
IBM i Access Client Solutions code execution
8.8
CVSS
1%
EPSS
No
On KEV
Description
IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to execute remote code. Due to improper authority checks the attacker could perform operations on the PC under the user's authority. IBM X-Force ID: 268273.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IA
i Access Client Solutions · IBM
1.1.2 through 1.1.4; 1.1.4.3 through 1.1.9.3 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-45185
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-45185
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/268273
Vendor Advisory
https://www.ibm.com/support/pages/node/7091942
More from i Access Client Solutions
9.6
CVE-2026-13433
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
8.8
CVE-2026-13105
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
8.8
CVE-2026-7770
IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator
7.8
CVE-2026-14875
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
7.8
CVE-2026-13094
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities