VULNERABILITY INTELLIGENCE

CVE-2025-55112

CVSS score7.4 HIGH
EPSS probability0.22%
CISA KEVNot currently listed
Published2025-09-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 (and potentially earlier unsupported versions) that are configured to use the non-default Blowfish cryptography algorithm use a hardcoded key. An attacker with access to network traffic and to this key could decrypt network traffic between the Control-M/Agent and Server.

Weakness classification

  • cert@airbus.com: CWE-321

Primary references