VULNERABILITY INTELLIGENCE
CVE-2025-31974
CVSS score3.9 LOW
EPSS probability0.18%
CISA KEVNot currently listed
Published2026-05-06
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
Description
HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only. An improperly configured root file system may allow unintended modifications to critical system components, potentially increasing the risk of system compromise or unauthorized changes.
Weakness classification
- CWE-1188: Initialization of a Resource with an Insecure Default
Primary references
- psirt@hcl.com — Vendor Advisory