CVE-2025-55114
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-16

Last updated on: 2025-09-17

Assigner: Airbus

Description
The improper order of AUTHORIZED_CTM_IP validation in the Control-M/Agent, where the Control-M/Server IP address is validated only after the SSL/TLS handshake is completed, exposes the Control-M/Agent to vulnerabilities in the SSL/TLS implementation under certain non-default conditions (e.g. CVE-2025-55117 or CVE-2025-55118) or potentially to resource exhaustion.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-16
Last Modified
2025-09-17
Generated
2026-06-16
AI Q&A
2025-09-16
EPSS Evaluated
2026-06-15
NVD
CVE-2025-55114
EUVD
EUVD-2025-29568
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
bmc control-m_agent 9.0.20
bmc control-m_agent 4.0
bmc control-m_agent 3.1
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-696 The product performs multiple related behaviors, but the behaviors are performed in the wrong order in ways that may produce resultant weaknesses.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is due to the improper order of AUTHORIZED_CTM_IP validation in the Control-M/Agent. Specifically, the Control-M/Server IP address is only validated after the SSL/TLS handshake is completed. This sequence flaw exposes the Control-M/Agent to vulnerabilities in the SSL/TLS implementation under certain non-default conditions or potentially to resource exhaustion.

Impact Analysis

The vulnerability can expose the Control-M/Agent to attacks exploiting weaknesses in the SSL/TLS implementation, which may lead to resource exhaustion or other security issues. This could affect the availability or stability of the affected system.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-55114. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart