VULNERABILITY INTELLIGENCE
CVE-2025-55118
CVSS score8.9 HIGH
EPSS probability0.37%
CISA KEVNot currently listed
Published2025-09-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:H
Description
Memory corruptions can be remotely triggered in the Control-M/Agent when SSL/TLS communication is configured. The issue occurs in the following cases: * Control-M/Agent 9.0.20: SSL/TLS configuration is set to the non-default setting "use_openssl=n"; * Control-M/Agent 9.0.21 and 9.0.22: Agent router configuration uses the non-default settings "JAVA_AR=N" and "use_openssl=n"
Weakness classification
- cert@airbus.com: CWE-122