This vulnerability is a stack-based buffer overflow that permits a local attacker to execute arbitrary code on systems running IBM SevOne Network Performance Management versions 7.0.0 through 8.2.2. The flaw could allow compromise of system integrity and confidentiality in the affected environment.

The issue affects IBM SevOne Network Performance Management for all editions (DI, NMS, SD‑WAN) in versions 7.0.0 up to and including 8.2.2. The most recent available fixes are DI 8.2.4 and NMS/SD‑WAN 8.2.3.

The CVSS score of 6.7 represents moderate severity, requiring a local attacker to exploit the flaw. No EPSS data is provided, and the vulnerability is not listed in CISA’s KEV catalog. The attack vector is inferred to be local, likely through a user with access to the application or an attacker who has compromised a local account. No remote exploitation path is documented in the CVE description.