CVE-2025-55112

Katalog CVE

CVSS 7.4 · High EPSS 0,22%

Kerentanan Use of Hard-coded Cryptographic Key pada bmc control-m/agent. Skor CVSS 3.1 7.4 (High) menurut airbus.com.

Deskripsi (NVD)

Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 (and potentially earlier unsupported versions) that are configured to use the non-default Blowfish cryptography algorithm use a hardcoded key. An attacker with access to network traffic and to this key could decrypt network traffic between the Control-M/Agent and Server.

Rincian

Terbit di NVD

16 September 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.4 (High), sumber airbus.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-321: Use of Hard-coded Cryptographic Key
CWE-327: Use of a Broken or Risky Cryptographic Algorithm

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000441966 advisory vendor
• https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442099 advisory vendor