Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Control-M/Agent — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Control-M/Agent, with AI-generated Chinese analysis, references, and POCs.

Vendor: BMC

CVE IDTitleCVSSSeverityPublished
CVE-2025-55108 BMC Control-M/Agent default configuration does not enforce SSL/TLS allowing unauthorized actions and remote code execution CWE-306 10.0 Critical2025-11-05
CVE-2025-55118 BMC Control-M/Agent memory corruption in SSL/TLS communication CWE-122 8.9 High2025-09-16
CVE-2025-55117 BMC Control-M/Agent buffer overflow in SSL/TLS communication CWE-121 5.3 Medium2025-09-16
CVE-2025-55116 BMC Control-M/Agent buffer overflow local privilege escalation CWE-121 8.8 High2025-09-16
CVE-2025-55115 BMC Control-M/Agent path traversal local privilege escalation CWE-23 8.8 High2025-09-16
CVE-2025-55114 BMC Control-M/Agent improper IP address filtering order CWE-696 5.3 Medium2025-09-16
CVE-2025-55113 BMC Control-M/Agent unescaped NULL byte in access control list checks CWE-158 9.0 Critical2025-09-16
CVE-2025-55112 BMC Control-M/Agent hardcoded Blowfish keys CWE-321 7.4 High2025-09-16
CVE-2025-55111 BMC Control-M/Agent insecure default file permissions CWE-276 5.5 Medium2025-09-16
CVE-2025-55110 BMC Control-M/Agent hardcoded default keystore password CWE-1392 5.5 Medium2025-09-16
CVE-2025-55109 BMC Control-M/Agent default SSL/TLS configuration authenticated bypass CWE-295 9.0 Critical2025-09-16

All 11 known CVE vulnerabilities affecting Control-M/Agent with full Chinese analysis, references, and POCs where available.