CVE-2025-55116

Summary

A buffer overflow in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent.

This vulnerability impacts the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions.

Affected Software

VendorProductVersion RangeStatus
BMCControl-M/Agent9.0.21unaffected
BMCControl-M/Agent9.0.20.100unaffected
BMCControl-M/Agent9.0.20affected
BMCControl-M/Agent9.0.19affected
BMCControl-M/Agent9.0.18affected

Weaknesses

  • CWE-121: CWE-121 Stack-based Buffer Overflow

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References