{"id":"CVE-2025-0618","aliases":["EUVD-2025-12242","GHSA-8w8c-p944-gqjj"],"status":"published","title":"A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR...","description":"A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper protection event to the HX service to trigger an exception. This exception will prevent any further tamper protection events from being processed, even after a reboot of HX.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00687,"percentile":0.52956,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2025-04-23T06:15:20Z","modified":"2026-06-17T08:26:50Z","products":[{"vendor":"trellix","product":"fireeye edr hx"}],"references":[{"url":"https://thrive.trellix.com/s/article/000014456"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0618"},{"url":"https://github.com/advisories/GHSA-8w8c-p944-gqjj"}],"sources":{"cve":[{"id":"CVE-2025-0618","description":"A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper protection event to the HX service to trigger an exception. This exception will prevent any further tamper protection events from being processed, even after a reboot of HX.","status":"published","published":"2025-04-23T06:15:20.536Z","modified":"2025-04-23T13:02:16.433Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:32:53.81273Z"}],"euvd":[{"id":"EUVD-2025-12242","description":"A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper protection event to the HX service to trigger an exception. This exception will prevent any further tamper protection events from being processed, even after a reboot of HX.","status":"published","published":"2025-04-23T06:15:20Z","modified":"2025-04-23T13:02:16Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:52:14.528239Z"}],"ghsa":[{"id":"GHSA-8w8c-p944-gqjj","title":"A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR...","description":"A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper protection event to the HX service to trigger an exception. This exception will prevent any further tamper protection events from being processed, even after a reboot of HX.","status":"published","published":"2025-04-23T09:33:32Z","modified":"2025-04-23T09:33:37Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:02:00.180386Z"}],"nvd":[{"id":"CVE-2025-0618","description":"A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper protection event to the HX service to trigger an exception. This exception will prevent any further tamper protection events from being processed, even after a reboot of HX.","status":"published","published":"2025-04-23T07:15:42.687Z","modified":"2026-06-17T08:26:50.77Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:11:01.507281Z"}]}}