CVE-2025-55114 | BDVDB-2026-294206 Detail
BMCControl-M/Agent
Description#
The improper order of AUTHORIZED_CTM_IP validation in the Control-M/Agent, where the Control-M/Server IP address is validated only after the SSL/TLS handshake is completed, exposes the Control-M/Agent to vulnerabilities in the SSL/TLS implementation under certain non-default conditions (e.g. CVE-2025-55117 or CVE-2025-55118) or potentially to resource exhaustion.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact low. Attack vector: network.
Weaknesses#
- CWE-696 Incorrect Behavior Order
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.