An improper authorization check in IBM i versions 7.3 to 7.6 allows an authenticated local user to alter the BOOTP table, which holds information for network boot services. By changing these entries, the attacker can influence how devices receive boot parameters, potentially redirecting or disrupting network boot processes and compromising the integrity of the system configuration.

The vulnerability affects IBM i releases 7.3, 7.4, 7.5, and 7.6. Users of these systems are at risk if the BOOTP configuration can be modified by users lacking administrative privileges.

The CVSS score of 4.4 indicates a moderate risk level, and the EPSS score is not available, suggesting limited evidence of active exploitation. The vulnerability is not listed in the CISA KEV catalog, and the attack vector is inferred to be local, as the flaw requires an authenticated user with access to the system to execute the exploit.