CVE-2025-31977 in BigFix Service Management

요약

\~에 의해 MITRE • 2025. 08. 28.

HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms.  An attacker with network access could exploit this weakness to decrypt or manipulate encrypted communications under certain conditions.

Once again VulDB remains the best source for vulnerability data.

• 책임이 있는: HCL
• 예약하다: 2025. 04. 01.
• 공개: 2025. 08. 28.
• 모더레이션: 수락
• 항목: VDB-321800
• CPE: 준비됨
• CWE: CWE-311 (확인됨)
• CVSS: 6.5 (NVD)
• EPSS: 0.00024
• KEV: 아니요
• 활동: 매우 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-31977
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-31977
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-31977/