Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-55078 State: PUBLISHED Published: 2025-10-14T07:28:56.148Z Last Updated: 2025-10-14T15:29:21.710Z Vendors: Eclipse Foundation Products: ThreadX Problem Types: CWE-233 Description: In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a reserved or unmapped memory region. Vulnerable system calls had a check of pointers, but that check wasn't verifying whether the pointer is outside the module memory region. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-wcfg-5jpf-hhxq
CVE ID: CVE-2025-55079 State: PUBLISHED Published: 2025-10-15T04:29:00.882Z Last Updated: 2025-10-15T18:38:38.157Z Vendors: Eclipse Foundation Products: ThreadX Problem Types: CWE-770 Description: In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority. In some cases the check of that maximum priority wasn't performed, allowing, as a result, to obtain a thread with higher priority than expected and causing a possible denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-w8rw-fqgj-9r49
CVE ID: CVE-2025-55080 State: PUBLISHED Published: 2025-10-15T05:41:50.536Z Last Updated: 2025-10-15T17:41:32.823Z Vendors: Eclipse Foundation Products: ThreadX Problem Types: CWE-233 Description: In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-76hh-wrj5-hr2v
CVE ID: CVE-2025-55081 State: PUBLISHED Published: 2025-10-15T10:46:05.076Z Last Updated: 2025-10-15T13:14:49.223Z Vendors: Eclipse Foundation Products: NetX Duo Problem Types: CWE-126 Description: In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification of certain SSL/TLS client hello message: the ciphersuite length and compression method length. In case of an attacker-crafted message with values outside of the expected range, it could cause an out-of-bound read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-5vrv-8
Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-5vrv-8j5h-h6h6
CVE ID: CVE-2025-55082 State: PUBLISHED Published: 2025-10-15T11:03:31.806Z Last Updated: 2025-10-15T13:11:31.010Z Vendors: Eclipse Foundation Products: NetX Duo Problem Types: CWE-125 Description: In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was a potential out of bound read in _nx_secure_tls_process_clienthello() because of a missing validation of PSK length provided in the user message. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-8h38-qjhh-mf2h
CVE ID: CVE-2025-55083 State: PUBLISHED Published: 2025-10-15T14:11:23.044Z Last Updated: 2025-10-27T16:12:55.970Z Vendors: Eclipse Foundation Products: NetX Duo Problem Types: CWE-126 Description: In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check resulting it out by two out of bound read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-9hw5-4xcv-jprm
CVE ID: CVE-2025-55084 State: PUBLISHED Published: 2025-10-16T06:29:35.631Z Last Updated: 2025-10-16T14:29:44.816Z Vendors: Eclipse Foundation Products: NetX Duo Problem Types: CWE-126 Description: In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check in_nx_secure_tls_proc_clienthello_supported_versions_extension() in the extension version field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-m474-39rw-v8gm
CVE ID: CVE-2025-55085 State: PUBLISHED Published: 2025-10-17T14:22:28.880Z Last Updated: 2025-10-20T18:42:08.621Z Vendors: Eclipse Foundation Products: NetX Duo Problem Types: CWE-125, CWE-1286 Description: In NextX Duo before 6.4.4, in the HTTP client module, the network support code for Eclipse Foundation ThreadX, the parsing of HTTP header fields was missing bounds verification. A crafted server response could cause undefined behavior. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-9c77-rgp9-c2g2
CVE ID: CVE-2025-55086 State: PUBLISHED Published: 2025-10-20T17:49:29.647Z Last Updated: 2025-10-20T20:23:18.104Z Vendors: Eclipse Foundation Products: NextX Duo Problem Types: CWE-1285, CWE-125 Description: In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the server reply. With a crafted packet, an attacker could cause an out of memory read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-99pw-cp79-2j5j
CVE ID: CVE-2025-55087 State: PUBLISHED Published: 2025-10-17T06:03:14.098Z Last Updated: 2025-10-17T13:07:14.994Z Vendors: Eclipse Foundation Products: NextX Duo Problem Types: CWE-1285, CWE-125 Description: In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted SNMPv3 security parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-v474-mv4g-v8cx
CVE ID: CVE-2025-55089 State: PUBLISHED Published: 2025-10-16T06:33:40.809Z Last Updated: 2025-10-16T14:25:24.055Z Vendors: Eclipse Foundation Products: FileX Problem Types: CWE-119 Description: In FileX before 6.4.2, the file support module for Eclipse Foundation ThreadX, there was a possible buffer overflow in the FileX RAM disk driver. It could cause a remote execurtion after receiving a crafted sequence of packets Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/filex/security/advisories/GHSA-467v-6j75-3j7g
CVE ID: CVE-2025-55090 State: PUBLISHED Published: 2025-10-16T06:43:17.480Z Last Updated: 2025-10-16T14:24:53.582Z Vendors: Eclipse Foundation Products: NetX Duo Problem Types: CWE-125, CWE-126 Description: In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receive() function when received an Ethernet frame with less than 4 bytes of IP packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-cf2g-j6vv-m8c5
CVE ID: CVE-2025-55091 State: PUBLISHED Published: 2025-10-16T07:56:33.908Z Last Updated: 2025-10-16T13:33:01.266Z Vendors: Eclipse Foundation Products: NetX Duo Problem Types: CWE-125, CWE-126 Description: In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ip_packet_receive() function when received an Ethernet with type set as IP but no IP data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-pf5q-r6q5-6j2f
CVE ID: CVE-2025-55092 State: PUBLISHED Published: 2025-10-17T05:09:16.494Z Last Updated: 2025-10-17T14:23:20.788Z Vendors: Eclipse Foundation Products: NetX Duo Problem Types: CWE-125, CWE-126 Description: In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_option_process() when processing an IPv4 packet with the timestamp option. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-vwh7-h99r-fvwq
CVE ID: CVE-2025-55093 State: PUBLISHED Published: 2025-10-17T05:11:43.761Z Last Updated: 2025-10-17T14:21:12.250Z Vendors: Eclipse Foundation Products: NetX Duo Problem Types: CWE-126 Description: In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_packet_receive() when handling unicast DHCP messages that could cause corruption of 4 bytes of memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-c9pq-93jp-w649
CVE ID: CVE-2025-55094 State: PUBLISHED Published: 2025-10-17T05:29:00.960Z Last Updated: 2025-10-17T14:15:12.631Z Vendors: Eclipse Foundation Products: NetX Duo Problem Types: CWE-125 Description: In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_icmpv6_validate_options() when handling a packet with ICMP6 options. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-rf32-h832-hg8r
CVE ID: CVE-2025-55096 State: PUBLISHED Published: 2025-10-17T05:32:45.567Z Last Updated: 2025-10-17T13:20:44.212Z Vendors: Eclipse Foundation Products: NetX Duo Problem Types: CWE-191 Description: In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_hid_report_descriptor_get() when parsing a descriptor of an USB HID device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-8m9v-jvjp-gmxq
CVE ID: CVE-2025-55097 State: PUBLISHED Published: 2025-10-17T05:35:02.744Z Last Updated: 2025-10-17T13:15:56.507Z Vendors: Eclipse Foundation Products: USBX Problem Types: CWE-125 Description: In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_streaming_sampling_get() when parsing a descriptor of an USB streaming device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-r6h5-fmhc-v3j7
CVE ID: CVE-2025-55098 State: PUBLISHED Published: 2025-10-17T05:36:59.542Z Last Updated: 2025-10-17T14:14:20.773Z Vendors: Eclipse Foundation Products: USBX Problem Types: CWE-125 Description: In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_device_type_get() when parsing a descriptor of an USB audio device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-4jc2-x5hv-46fq
CVE ID: CVE-2025-55099 State: PUBLISHED Published: 2025-10-17T05:38:30.900Z Last Updated: 2025-10-17T13:13:12.730Z Vendors: Eclipse Foundation Products: USBX Problem Types: CWE-125 Description: In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_alternate_setting_locate() when parsing a descriptor with attacker-controlled frequency fields. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-93mv-fcpr-9488
CVE ID: CVE-2025-55100 State: PUBLISHED Published: 2025-10-17T05:40:10.333Z Last Updated: 2025-10-17T13:11:00.258Z Vendors: Eclipse Foundation Products: USBX Problem Types: CWE-125 Description: In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio10_sam_parse_func() when parsing a list of sampling frequencies. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-threadx/usbx/security/advisories/GHSA-j253-w29r-9m48
CVE ID: CVE-2025-55103 State: PUBLISHED Published: 2025-08-21T19:25:13.460Z Last Updated: 2025-09-09T16:54:02.458Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: Portal for ArcGIS Enterprise Sites Problem Types: CWE-79 Description: There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject malicious a file with an embedded xss script which when loaded could potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required to execute this attack are high. The attack could disclose a privileged token
victim’s browser. The privileges required to execute this attack are high. The attack could disclose a privileged token which may result in the attacker gaining full control of the Portal. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/2925891-2
CVE ID: CVE-2025-55104 State: PUBLISHED Published: 2025-08-21T19:28:43.077Z Last Updated: 2025-08-21T20:04:38.047Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: Portal for ArcGIS Enterprise Sites Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists ArcGIS HUB and ArcGIS Enterprise Sites which allows an authenticated user with the ability to create or edit a site to add and store an XSS payload. If this stored XSS payload is triggered by any user attacker supplied JavaScript may execute in the victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-b
in the victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/2925891-2
CVE ID: CVE-2025-55105 State: PUBLISHED Published: 2025-08-21T19:29:01.441Z Last Updated: 2025-08-21T20:14:37.100Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: Portal for ArcGIS Enterprise Experience Sites Problem Types: CWE-79 Description: There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject malicious a file with an embedded xss script which when loaded could potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required to execute this attack are high. The attack could disclose a privi
code in the victim’s browser. The privileges required to execute this attack are high. The attack could disclose a privileged token which may result in the attacker gaining full control of the Portal. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/2925891-2
CVE ID: CVE-2025-55106 State: PUBLISHED Published: 2025-08-21T19:29:37.478Z Last Updated: 2025-08-21T20:06:32.095Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: Portal for ArcGIS Enterprise Sites Problem Types: CWE-79 Description: There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject malicious a file with an embedded xss script which when loaded could potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required to execute this attack are high. The attack could disclose a privileged token
CVE ID: CVE-2025-55107 State: PUBLISHED Published: 2025-08-21T19:29:59.526Z Last Updated: 2025-09-18T21:30:04.719Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Esri Products: Portal for ArcGIS Enterprise Sites Problem Types: CWE-79 Description: There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject malicious a file with an embedded xss script which when loaded could potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required to execute this attack are high. The attack could disclose a privileged token
CVE ID: CVE-2025-55108 State: PUBLISHED Published: 2025-11-05T09:07:29.915Z Last Updated: 2025-11-18T12:33:27.896Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: BMC Products: Control-M/Agent Problem Types: CWE-306 Description: The Control-M/Agent is vulnerable to unauthenticated remote code execution, arbitrary file read and write and similar unauthorized actions when mutual SSL/TLS authentication is not enabled (i.e. in the default configuration). NOTE: * The vendor believes that this vulnerability only occurs when documented security best practices are not followed. BMC has always strongly recommended to use security best practices such as configuring S
est practices are not followed. BMC has always strongly recommended to use security best practices such as configuring SSL/TLS between Control-M Server and Agent. * The vendor notifies that Control-M/Agent is not impacted in Control-M SaaS Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442099 - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000441962 - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442271
CVE ID: CVE-2025-55109 State: PUBLISHED Published: 2025-09-16T12:14:36.357Z Last Updated: 2025-09-17T03:55:55.454Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: BMC Products: Control-M/Agent Problem Types: CWE-295 Description: An authentication bypass vulnerability exists in the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions when using an empty or default kdb keystore or a default PKCS#12 keystore. A remote attacker with access to a signed third-party or demo certificate for client authentication can bypass the need for a certificate signed by the certificate authority of the organization during authen
thentication can bypass the need for a certificate signed by the certificate authority of the organization during authentication on the Control-M/Agent. The Control-M/Agent contains hardcoded certificates which are only trusted as fallback if an empty kdb keystore is used; they are never trusted if a PKCS#12 keystore is used. All of these certificates are now expired. In addition, the Control-M/Agent default kdb and PKCS#12 keystores contain trusted third-party certificates (external recognized CAs and default self-signed demo certificates) which are trusted for client authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bmcapps.my.site.com/casemgmt/sc_Kno
entication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442099 - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000441963
CVE ID: CVE-2025-55110 State: PUBLISHED Published: 2025-09-16T12:16:57.669Z Last Updated: 2025-09-16T18:29:54.062Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: BMC Products: Control-M/Agent Problem Types: CWE-1392 Description: Control-M/Agents use a kdb or PKCS#12 keystore by default, and the default keystore password is well known and documented. An attacker with read access to the keystore could access sensitive data using this password. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442099 - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000441964
CVE ID: CVE-2025-55111 State: PUBLISHED Published: 2025-09-16T12:18:22.878Z Last Updated: 2025-09-16T18:29:31.739Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: BMC Products: Control-M/Agent Problem Types: CWE-276 Description: Certain files with overly permissive permissions were identified in the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions as well as in newer versions which were upgraded from an affected version. These files contain keys and passwords relating to SSL files, keystore and policies. An attacker with local access to the system running the Agent can access these files. Additional Analys
re and policies. An attacker with local access to the system running the Agent can access these files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442099 - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000441965
CVE ID: CVE-2025-55112 State: PUBLISHED Published: 2025-09-16T12:19:24.308Z Last Updated: 2025-09-17T03:55:54.628Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: BMC Products: Control-M/Agent Problem Types: CWE-321, CWE-327 Description: Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 (and potentially earlier unsupported versions) that are configured to use the non-default Blowfish cryptography algorithm use a hardcoded key. An attacker with access to network traffic and to this key could decrypt network traffic between the Control-M/Agent and Server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bmcapps.my.site.com/casemgmt
/Agent and Server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442099 - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000441966
CVE ID: CVE-2025-55113 State: PUBLISHED Published: 2025-09-16T12:20:03.820Z Last Updated: 2025-09-17T03:55:52.877Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: BMC Products: Control-M/Agent Problem Types: CWE-158 Description: If the Access Control List is enforced by the Control-M/Agent and the C router is in use (default in Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions; non-default but configurable using the JAVA_AR setting in newer versions), the verification stops at the first NULL byte encountered in the email address referenced in the client certificate. An attacker could bypass configured ACLs
LL byte encountered in the email address referenced in the client certificate. An attacker could bypass configured ACLs by using a specially crafted certificate. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442099 - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000441967
CVE ID: CVE-2025-55114 State: PUBLISHED Published: 2025-09-16T12:20:30.958Z Last Updated: 2025-09-16T13:17:35.241Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: BMC Products: Control-M/Agent Problem Types: CWE-696 Description: The improper order of AUTHORIZED_CTM_IP validation in the Control-M/Agent, where the Control-M/Server IP address is validated only after the SSL/TLS handshake is completed, exposes the Control-M/Agent to vulnerabilities in the SSL/TLS implementation under certain non-default conditions (e.g. CVE-2025-55117 or CVE-2025-55118) or potentially to resource exhaustion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
25-55118) or potentially to resource exhaustion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000442099 - https://bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000441968