TI-2025-34806 CVE-2025-55118 · GHSA-r54c-3jgv-4vr7
BMC Control-M/Agent memory corruption in SSL/TLS communication
Priority LOW 37
Memory corruptions can be remotely triggered in the Control-M/Agent when SSL/TLS communication is configured.
Vulnerabilities
10 records
Advisory: BMC Control-M/Agent — bmcapps.my.site.com/casemgmt/sc_KnowledgeArticle?sfdcid=000… Clear all filters
TI-2025-34805 CVE-2025-55117 · GHSA-2227-jcpx-8w3r
BMC Control-M/Agent buffer overflow in SSL/TLS communication
Priority LOW 34
A stack-based buffer overflow can be remotely triggered when formatting an error message in the Control-M/Agent when SSL/TLS communication is configured.
TI-2025-34804 CVE-2025-55116 · GHSA-j8qm-x36w-63v9
BMC Control-M/Agent buffer overflow local privilege escalation
Priority MEDIUM 41
A buffer overflow in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent.
TI-2025-34803 CVE-2025-55115 · GHSA-3r7q-94c4-jm45
BMC Control-M/Agent path traversal local privilege escalation
Priority MEDIUM 41
A path traversal in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent.
TI-2025-34802 CVE-2025-55114 · GHSA-9w5m-fv42-36cx
BMC Control-M/Agent improper IP address filtering order
Priority LOW 37
The improper order of AUTHORIZED_CTM_IP validation in the Control-M/Agent, where the Control-M/Server IP address is validated only after the SSL/TLS handshake is completed, exposes the Control-M/Agent to vulnerabilities…
TI-2025-34801 CVE-2025-55113 · GHSA-r6f6-cvqf-h86g
BMC Control-M/Agent unescaped NULL byte in access control list checks
Priority MEDIUM 43
If the Access Control List is enforced by the Control-M/Agent and the C router is in use (default in Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions; non-default but…
TI-2025-34800 CVE-2025-55112 · GHSA-grqv-c4p4-jp68
BMC Control-M/Agent hardcoded Blowfish keys
Priority LOW 35
Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 (and potentially earlier unsupported versions) that are configured to use the non-default Blowfish cryptography algorithm use a hardcoded key.
TI-2025-34799 CVE-2025-55111 · GHSA-xxwc-hg26-q85m
BMC Control-M/Agent insecure default file permissions
Priority LOW 25
Certain files with overly permissive permissions were identified in the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions as well as in newer versions which were upgrad…
TI-2025-34798 CVE-2025-55110 · GHSA-799r-mf4m-6j6w
BMC Control-M/Agent hardcoded default keystore password
Priority LOW 25
Control-M/Agents use a kdb or PKCS#12 keystore by default, and the default keystore password is well known and documented.
TI-2025-34797 CVE-2025-55109 · GHSA-gh47-wqwg-v2cm
BMC Control-M/Agent default SSL/TLS configuration authenticated bypass
Priority MEDIUM 43
An authentication bypass vulnerability exists in the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions when using an empty or default kdb keystore or a default PKCS#12…