| Product | Assessment Status | Risk Status | Remedy Status |
| ADDERLink INFINITY Manager | Complete | Medium (CVSS 6.1) subject to isolation from untrusted/public networks | In progress - planned for AIM v6.3, March 2027 |
Assessment and remedy status
Following an internal risk assessment, Adder has determined a CVSS (Common Vulnerability Scoring System) rating of 6.1 – ‘Medium’ for the ADDERLink INFINITY Manager, subject to it being isolated from untrusted or public networks, such as the internet.
If your ADDERLink INFINITY Manager is not isolated, isolate it from any untrusted or public network, such as the internet, immediately and review your installation requirements.
These precautions continue to apply regardless of your planned upgrade route. If you need help reviewing your installation, please contact Adder Technical Support using Contact Support.
Customers using AIM v6.2
The PHP2Shell remedy will be included in AIM v6.3, currently planned for March 2027. In the meantime, please continue to follow the network isolation guidance above. Upgrade instructions and any prerequisites for moving from v6.2 to v6.3 will be made available at time of release.
Customers using AIM v5.x and earlier
There are no plans to provide a separate PHP2Shell fix for AIM v5.x or earlier. The following options and requirements are available to AIM5.x and earlier customers:
- Upgrade to AIM v6.3 when available (Register here to be notified as soon as AIM v6.3 is available)
- Prepare through an interim upgrade to AIMv6.2: AIM v6.2 does not itself provide the PHP2Shell fix but will make an upgrade to v6.3 faster and more straightforward.
- Remain on v5.x adhering to existing installation guidance (Installation Guidance)
Support and further updates
For advice about your installation, contact Adder Technical Support through Contact Support
To register for future updates regarding AIM use Registration Form
Discover what AIM 6 can do here
Upgrade your ADDERLink INFINITY Manger - AIM Downloads