Bmc Control-m/agent vulnerabilities

• bmc control-m/agent BMC Control-M/Agent default configuration does not enforce SSL/TLS allowing unauthorized actions and remote code execution CVE-2025-55108 9.5 CriticalNovember 5, 2025
• bmc control-m/agent BMC Control-M/Agent memory corruption in SSL/TLS communication CVE-2025-55118 8.4 HighSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent buffer overflow in SSL/TLS communication CVE-2025-55117 6.3 MediumSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent buffer overflow local privilege escalation CVE-2025-55116 9.3 CriticalSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent path traversal local privilege escalation CVE-2025-55115 9.3 CriticalSeptember 16, 2025
• bmc control-m/agent BMC Control-M/Agent improper IP address filtering order CVE-2025-55114 6.9 MediumSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent unescaped NULL byte in access control list checks CVE-2025-55113 9.5 CriticalSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent hardcoded Blowfish keys CVE-2025-55112 7.6 HighSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent insecure default file permissions CVE-2025-55111 5.7 MediumSeptember 16, 2025
• bmc control-m/agent BMC Control-M/Agent hardcoded default keystore password CVE-2025-55110 5.7 MediumSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent default SSL/TLS configuration authenticated bypass CVE-2025-55109 9.5 CriticalSeptember 16, 2025